July 2023 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Leap 42.3 Build 0312 released!
by Ludwig Nussel 25 Apr '24

25 Apr '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&version=42.3&bui… https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Distribution&q… When you reply to discuss some issues, make sure to change the subject. Please use the test plan at https://docs.google.com/spreadsheets/d/1AGKijKpKiJCB616-bHVoNQuhWHpQLHPWCb3… to record your testing efforts and use bugzilla to report bugs. Packages changed: biosdevname btrfsmaintenance conduit gconf2-branding-openSUSE (42.1 -> 42.3) ibus kactivitymanagerd kde-user-manager kernel-source (4.4.73 -> 4.4.74) libxml2 libzypp (16.12.0 -> 16.13.0) lightdm marble mc plasma5-integration plasma5-openSUSE postgresql (9.4 -> 9.6) python-coverage (3.7.1 -> 4.3.4) ucode-intel (20160714 -> 20170511) yast2-bootloader (3.2.22 -> 3.2.23) yast2-ntp-client (3.2.9 -> 3.2.12) === Details === ==== biosdevname ==== - Duplicate naming of SRIOV VFs by biosdevname when VPD_DCM Strings are present in VFs (bsc#1042185) * Add: biosdevname_avoid_duplicates.patch ==== btrfsmaintenance ==== - Require btrfsprogs (bsc#1047226) - update to 0.2 - updated documentation - no hardcoded paths to external utilities - fixed logger name typos for 'journal' target - defrag fixes (sysconfig, find arguments) - Removed patch: balance-typo.patch - Added patch: sysconfig-override-trim.diff - Add balance-typo.patch (bnc#986543) - version 0.1.1 - fix typo and make journal logging target work - cron refresh: remove bashism - Removed patches: * 0003-Add-COPYING-file.patch * 0011-cron-refresh-remove-debuggiong-output.patch - cron script symlinks are not created on first installation (bsc#907343) - add COPYING to package - refresh script: remove extra messages - add uninstall targets - fix refresh service - adjust sysconfig defaults - Add more package dependencies (cron, zypp-plugin) - minor bugfixes - Add supplements(btrfsprogs) - initial version 0.1 ==== conduit ==== Subpackages: conduit-lang - Use python-vobject instead of vobject per python-vobject change in 42.3. ==== gconf2-branding-openSUSE ==== Version update (42.1 -> 42.3) - do not build novell-sound-theme in the gconf2-branding-SLED build to prevent duplicated binaries in openSUSE Leap. The novell-sound-theme is taken from gconf2-branding-SLES sources on both the SLED product and the SLES WE module. bsc#1046099 - bump versions ==== ibus ==== Subpackages: ibus-branding-openSUSE-KDE ibus-gtk ibus-gtk-32bit ibus-gtk3 ibus-lang libibus-1_0-5 libibus-1_0-5-32bit python-ibus typelib-1_0-IBus-1_0 - Update ibus.spec: copy auto-start files to SOURCE directory to enable modifications before compile. - Add ibus-disable-engines-preload-in-GNOME.patch: Disable load preload-engines actions in SLE, which is unnecessary for mono IMF in SLE and may cause CJK user login failed (bsc#1036729). ==== kactivitymanagerd ==== - Recommend -lang package ==== kde-user-manager ==== - Recommend -lang package ==== kernel-source ==== Version update (4.4.73 -> 4.4.74) Subpackages: kernel-default kernel-default-devel kernel-devel kernel-docs kernel-macros kernel-syms - Delete patches.kabi/kabi-fix-for-kvm-x86-fix-singlestepping-over-syscall. No need for kABI fix yet for Leap 42.3. - commit f0a86d9 - Fix kABI breakage by KVM CVE fix (bsc#1045922). - commit c0308f6 - powerpc/perf: Fix branch event code for power9 (fate#321438, Pending SUSE Kernel Fixes). - commit e954af6 - powerpc: Fix /proc/cpuinfo revision for POWER9 DD2 (bsc#1046789). - commit 444247f - Refresh metadata patches.drivers/ibmvnic-a2-Fix-assignment-of-RX-TX-IRQ-s.patch. - commit be32be9 - drm/i915: Serialize GTT/Aperture accesses on BXT (bsc#1046821). - commit b263fef - Bluetooth: hidp: fix possible might sleep error in hidp_session_thread (bsc#1031784). - Refresh patches.suse/kgr-0008-mark-task_safe-in-some-kthreads.patch. - commit 18c6f3e - KVM: x86: fix singlestepping over syscall (CVE-2017-7518 bsc#1045922). - commit d989643 - nvme/pci: Fix stuck nvme reset (bsc#1043805). - commit 7afe4f0 - Refresh fadump patches to upstream and add metadata patches.arch/powerpc-fadump-add-reschedule-point-while-releasing-memory.patch. patches.arch/powerpc-fadump-avoid-duplicates-in-crash-memory-ranges.patch patches.arch/powerpc-fadump-avoid-holes-in-boot-memory-area-when-fadump-is-registered.patch patches.arch/powerpc-fadump-provide-a-helpful-error-message.patch - commit f0fb5c3 - blacklist.conf: Remove duplicated entries - commit cb960d2 - Remove duplicated blacklist entries and put git-commit tag to patches - commit 12a0cb2 - blacklist.conf: Remove duplicated entry. - commit 561ddb1 - ibmvnic: Fix assignment of RX/TX IRQ's (bsc#1046589). - commit 5fa38bf - blacklist.conf: blacklist 570d8e939801 we do not care about the code in Documentation all that much, do we? - commit 69d5811 - blacklist.conf: blaclist 5380e5644afb it is just not worth backporting without any explicit report where a silently truncated success would lead to a real bug. - commit fc28626 - blacklist.conf: unnecessary patch The bug triggers only upon a malformed descriptor and the comparison is so that our buffer would be too large not too small so no overflow. The device would not work, but it won't anyway. - commit 99f8a16 - Rearrange the previous patches for hpsa and smartpqi to the right position. - commit a1f1f27 - Update patches.fixes/xfs-split-default-quota-limits-by-quota-type.patch (bsc#1040941). Fix the bug nr used. - commit 115ba75 - printk: Correctly handle preemption in console_unlock() (bsc#1046434). - commit 0a3c2a4 - printk/xen: Force printk sync mode when migrating Xen guest (bsc#1043347). - commit e13596b - btrfs: disable possible cause of premature ENOSPC (bsc#1040182) - commit 8bf31da - rbd: make sure pages are freed by libceph (bsc#1045596). - rbd: drop extra rbd_img_request_get (bsc#1045596). - commit c8719f2 - dm-raid: Do not call BUG() in __rdev_sectors() (bsc#1046264). - commit 0b1aab0 - btrfs: Round down values which are written for total_bytes_size (bsc#1043912). - btrfs: Manually implement device_total_bytes getter/setter (bsc#1043912). - commit c4d2eb7 - pipe: cap initial pipe capacity according to pipe-max-size limit (bsc#1045330). - commit 4ee3ec2 - Blacklist drivers/net/ethernet/ibm/emac We do not build the driver. - commit d432b2b - blacklist.conf: this patch breaks the API It disallows some operations that are now allowed - commit 98325c2 - arm64: Update config files. (bsc#1036737) Disable XGENE_PMU. - commit 7bb0115 - Disable Xilinx network drivers (bsc#1046170). - commit 656fc83 - hwpoison, memcg: forcibly uncharge LRU pages (bnc#1046105). - commit 2b252e1 - blacklist.conf: blacklist 570d8e939801 the issue is visible only when 80df554275c2 is applied (4.7+ and not backported to our trees) - commit 47b83ce - config/x86_64: make CONFIG_SERIAL_8250_DW and *_MID built-in (bsc#1024449) - commit 2e3ca7e - Refresh patches.drivers/0477-nvme-add-hostid-token-to-fabric-options.patch. Update mainline references. - commit eee1109 - fs/exec.c: account for argv/envp pointers (bnc#1039354, CVE-2017-1000365). - commit 7418d0f - Refresh ibmvnic patch metadata patches.drivers/ibmvnic-98-ibmvnic-Correct-return-code-checking-for-ibmvnic_init-during-probe.patch. patches.drivers/ibmvnic-a0-ibmvnic-Fix-incorrectly-defined-ibmvnic_request_map_rsp-structure.patch. patches.drivers/ibmvnic-a1-ibmvnic-Fix-error-handling-when-registering-long-term-mapped-buffers.patch. - commit babc17a - Refresh metadata patches.fixes/powerpc-tm-Fix-stack-pointer-corruption-in-__tm_recheckpoint. - commit 0b5bdc6 - powerpc/ftrace: Pass the correct stack pointer for DYNAMIC_FTRACE_WITH_REGS (FATE#322421). - commit 936e653 - nvme: add hostid token to fabric options (bsc#1045293). - commit 52dffb9 - iw_cxgb4: Fix error return code in c4iw_rdev_open() (bsc#1026570). - RDMA/iw_cxgb4: Always wake up waiter in c4iw_peer_abort_intr() (bsc#1026570). - commit 2ce43b1 - clocksource/drivers/arm_arch_timer: Fix read and iounmap of incorrect variable (bsc#1045937). - commit 594f037 - Linux 4.4.74 (CVE-2017-1000364 bnc#1012382 bnc#1039348 bnc#1045340 bsc#1031717 bsc#1043231). - Delete patches.drivers/media-pvrusb2-reduce-stack-usage-pvr2_eeprom_analyze. - Delete patches.drivers/media-vb2-Fix-an-off-by-one-error-in-vb2_plane_vaddr. - Delete patches.drivers/staging-rtl8188eu-prevent-an-underflow-in-rtw_check_. - Delete patches.fixes/mm-fix-new-crash-in-unmapped_area_topdown.patch. - Delete patches.fixes/mm-larger-stack-guard-gap-between-vmas.patch. - commit 5e41880 - tty: Fix ldisc crash on reopened tty (bnc#1043488). - commit 04cca20 - tty: Destroy ldisc instance on hangup (bnc#1043488). - tty: Refactor tty_ldisc_reinit() for reuse (bnc#1043488). - tty: Use 'disc' for line discipline index name (bnc#1043488). - tty: Move tty_ldisc_kill() (bnc#1043488). - tty: Handle NULL tty->ldisc (bnc#1043488). - tty: Prepare for destroying line discipline on hangup (bnc#1043488). - tty: Reset c_line from driver's init_termios (bnc#1043488). - tty: Simplify tty_set_ldisc() exit handling (bnc#1043488). - commit c016cca - kabi: ignore fs_info parameter for tracepoints that didn't have it (bsc#1044912). - commit 24869ea ==== libxml2 ==== Subpackages: libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools - Security fix: * libxml2-CVE-2017-7376.patch [bsc#1044887, CVE-2017-7376] * Increase buffer space for port in HTTP redirect support - Security fix: * libxml2-CVE-2017-7375.patch [bsc#1044894, CVE-2017-7375] * Prevent unwanted external entity reference - Upstream patches updated and with tests: * libxml2-CVE-2017-9047.patch and libxml2-CVE-2017-9048.patch merged into libxml2-CVE-2017-9047.patch [bsc#1039066, bsc#1039661] * libxml2-CVE-2017-9049.patch and libxml2-CVE-2017-9050.patch merged into libxml2-CVE-2017-9049.patch [bsc#1039063, bsc#1039064] ==== libzypp ==== Version update (16.12.0 -> 16.13.0) - Adapt loop mounting of iso images (bsc#1038132, bsc#1033236) - Adjust zypp.conf for openSUSE Tumbleweed (bsc#1031756) - Change arch variable names conflicting with compiler macros (fixes #70) - Fix potential crash if repo has no baseurl (bnc#1043218) - version 16.13.0 (0) ==== lightdm ==== Subpackages: liblightdm-gobject-1-0 lightdm-lang - Augment patch to also resolve the target of symlink sessions for detemining the preselected option: * ignore-known-symlink-sessions.patch ==== marble ==== Subpackages: libastro1 libmarblewidget-qt5-27 marble-data marble-devel marble-doc marble-kde marble-lang - Add Fix-utm-enum-value.patch and reverse-apply it, this upstream commit causes a crash when adding bookmarks if switched to UTM view angles because the necessary handler functions for the dialog are not implemented yet (boo#1044747, kde#381872) - Add Fix-plain-map-and-political-map-showing-no-content.patch to fix the plain map and the political map being not displayed at all (kde#379297) ==== mc ==== Subpackages: mc-lang - sftp.patch: Backport upstream fixes for SFTP (boo#1004280, boo#1042797) ==== plasma5-integration ==== - Move the Recommends: %{name}-plugin-lang to the plasma5-integration-plugin sub package, otherwise the translations won't get installed as there is no main package (boo#1027925) - Actually apply the aforementioned patch (shouldn't the source validator have warned?) ==== plasma5-openSUSE ==== Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Fix installation of the sddm theme files (boo#1047254) ==== postgresql ==== Version update (9.4 -> 9.6) Subpackages: postgresql-contrib postgresql-devel postgresql-docs postgresql-server - Bump version and defaultpackage to 9.6. - Move ~postgres/.bash_profile to postgresql-server to avoid a file conflict between the versioned server packages. - Bump version and defaultpackage to 9.4. - Bump version and defaultpackage to 9.3. - Change license string to PostgreSQL. - Make all dummy packages noarch. - Make PostgreSQL 9.2 the default. - Reduce the postgresql packages with unversioned names to dummy packages that require the respective versioned package names. ==== python-coverage ==== Version update (3.7.1 -> 4.3.4) - uninstall alternatives in %postun - update for singlespec - update to 4.3.4: - Using the --skip-covered option on an HTML report with 100% coverage would cause a ?No data to report? error, as reported in issue 549. This is now fixed; thanks, Lo�c Dachary. - If-statements can be optimized away during compilation, for example, if 0: or if __debug__:. Coverage.py had problems properly understanding these statements which existed in the source, but not in the compiled bytecode. This problem, reported in issue 522, is now fixed. - If you specified --source as a directory, then coverage.py would look for importable Python files in that directory, and could identify ones that had never been executed at all. But if you specified it as a package name, that detection wasn?t performed. Now it is, closing issue 426. Thanks to Lo�c Dachary for the fix. - If you started and stopped coverage measurement thousands of times in your process, you could crash Python with a ?Fatal Python error: deallocating None? error. This is now fixed. Thanks to Alex Groce for the bug report. - On PyPy, measuring coverage in subprocesses could produce a warning: ?Trace function changed, measurement is likely wrong: None?. This was spurious, and has been suppressed. - Previously, coverage.py couldn?t start on Jython, due to that implementation missing the multiprocessing module (issue 551). This problem has now been fixed. Also, issue 322 about not being able to invoke coverage conveniently, seems much better: jython -m coverage run myprog.py works properly. - Let?s say you ran the HTML report over and over again in the same output directory, with --skip-covered. And imagine due to your heroic test-writing efforts, a file just acheived the goal of 100% coverage. With coverage.py 4.3, the old HTML file with the less-than-100% coverage would be left behind. This file is now properly deleted. - update to Version 4.3.1 ? 2016-12-28: - Some environments couldn?t install 4.3, as described in issue 540. This is now fixed. - The check for conflicting --source and --include was too simple in a few different ways, breaking a few perfectly reasonable use cases, described in issue 541. The check has been reverted while we re-think the fix for issue 265. - update to Version 4.3 ? 2016-12-27: Special thanks to Lo�c Dachary, who took an extraordinary interest in coverage.py and contributed a number of improvements in this release. - The HTML report now supports a --skip-covered option like the other reporting commands. Thanks, Lo�c Dachary for the implementation, closing issue 433. - Subprocesses that are measured with automatic subprocess measurement used to read in any pre-existing data file. This meant data would be incorrectly carried forward from run to run. Now those files are not read, so each subprocess only writes its own data. Fixes issue 510. - Coverage.py wouldn?t execute sys.excepthook when an exception happened in your program. Now it does, thanks to Andrew Hoos. Closes issue 535. - The coverage combine command will now fail if there are no data files to combine. The combine changes in 4.2 meant that multiple combines could lose data, leaving you with an empty .coverage data file. Fixes issues issue 525, issue 412, issue 516, and probably issue 511. - The branch coverage issues described in issue 493, issue 496, and issue 502 are now fixed, thanks to Lo�c Dachary. - Options can now be read from a tox.ini file, if any. Like setup.cfg, sections are prefixed with ?coverage:?, so [run] options will be read from the [coverage:run] section of tox.ini. Implements part of issue 519. Thanks, Stephen Finucane. - Specifying both --source and --include no longer silently ignores the include setting, instead it fails with a message. Thanks, Nathan Land and Lo�c Dachary. Closes issue 265. - Coverage.py can now search .pex files for source, just as it can .zip and .egg. Thanks, Peter Ebden. - update to 4.2: - Since ``concurrency=multiprocessing`` uses subprocesses, options specified on the coverage.py command line will not be communicated down to them. Only options in the configuration file will apply to the subprocesses. Previously, the options didn't apply to the subprocesses, but there was no indication. Now it is an error to use ``--concurrency=multiprocessing`` and other run-affecting options on the command line. This prevents failures like those reported in `issue 495`_. - Filtering the HTML report is now faster, thanks to Ville Skytt�. - update to 4.0.3: - Fixed a mysterious problem that manifested in different ways: sometimes hanging the process (`issue 420`_), sometimes making database connections fail (`issue 445`_). - The XML report now has correct ``<source>`` elements when using a ``--source=`` option somewhere besides the current directory. This fixes `issue 439`_. Thanks, Arcady Ivanov. - Fixed an unusual edge case of detecting source encodings, described in `issue 443`_. - Help messages that mention the command to use now properly use the actual command name, which might be different than "coverage". Thanks to Ben Finney, this closes `issue 438`_. - add LICENSE.txt - Pre require coreutils. This package is needed for the rm call in the pre section. Subprocess failed. Error: RPM failed: /var/tmp/rpm-tmp.gONanE: line 3: rm: command not found - specfile: * updated license * updated update-alternatives * README.txt -> README.rst - update to version 4.0: (long list, see http://coverage.readthedocs.org/en/latest/changes.html) - fix rhel deps by depending on /usr/sbin/update-alternatives ==== ucode-intel ==== Version update (20160714 -> 20170511) - Update to version 20170511 - Update to version 20161104. ==== yast2-bootloader ==== Version update (3.2.22 -> 3.2.23) - AuotYaST configuration: Set StorageDevices flag disks_valid to true. So libstorage can scan valid disks and "/" partition can be found. (bnc#1043132) - 3.2.23 ==== yast2-ntp-client ==== Version update (3.2.9 -> 3.2.12) - Resrict records are written at the end but the default file and most profiles use them at the beginning, which mangles the file completely (bsc#983486). To fix it we have just changed the order of writing. - 3.2.12 - AutoYaST: Fix crash when trying to sanitize not string values, for example initial_sync. - AutoYaST: Sanitize comments by only removing blank spaces at the beginning and adding line break. This avoids augeas parse errors (bsc#1045777). - 3.2.11 - AutoYaST: Fix crash in CFA when creating a command record with some key value option is given (bsc#1045968) - 3.2.10 - AutoYaST: Comments from autoyast profile should not be sanitized to avoid entries without space between value and comment (e.g trustedkey 1# coment). This is caused by a bug in augeas adding new entries. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 1

[opensuse-factory] acpid requires systemd?
by Felix Miata 25 Apr '24

25 Apr '24

Can this be true? If so, why? Zypper won't let me upgrade acpid without breakage unless systemd is installed too. I have systemd locked out, as I'd rather test things I can understand in Factory, not major overhaul stuff. -- "The wise are known for their understanding, and pleasant words are persuasive." Proverbs 16:21 (New Living Translation) Team OS/2 ** Reg. Linux User #211409 ** a11y rocks! Felix Miata *** http://fm.no-ip.com/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 3

enabling reproducible builds in Factory and ALP
by Jan Zerebecki 15 Mar '24

15 Mar '24

Hi *, to support https://en.opensuse.org/openSUSE:Reproducible_Builds I plan to get the following project configuration for Factory and ALP enabled: Macros: %source_date_epoch_from_changelog Y %clamp_mtime_to_source_date_epoch Y %use_source_date_epoch_as_buildtime Y %_buildhost reproducible :Macros I'm still waiting to get https://github.com/openSUSE/product-builder/pull/26 merged to prevent a bug with mirrors that will otherwise happen. Afterwards a time of the build is still in the HTTP header Last-Modified when requesting the rpm file. HTTP mtime is a few seconds earlier than end time of the build (seen in OBS web UI only as start + duration). I didn't double check, but it should also be recorded in the Tumbleweed archive Bernhard keeps, which can with a bit of work be looked up by content hash or name including version of the rpm file if its not on the normal mirrors anymore. Both the build time and host can also still be seen in the build log. Comments welcome. -- Best regards, Jan Zerebecki

4 6

wine and zlib
by Joe Salmeri 22 Feb '24

22 Feb '24

I did a fresh install of TW 20230222 on a new PC. My main desktop which was installed back in 2021 has also been updated ( zypper dup ) to 20230222. I found something odd when comparing packages between the 2 machines. Both PC's have wine installed, however... On my main desktop when the original install in 2021 of wine was done it installed libz1-32bit ( as per the zypper history logs ) and it still has that installed after it was updated to 20230222. On the new PC fresh install of 20230222 when wine was installed it installed libz-ng-compat1-32bit. The libz-ng-compat1-32bit version looks like it was forked in 2021, just after my main machine was originally built so that would explain why it has libz1-32bit but shouldn't it have been updated by zypper dup ??? Is this a bug that I should report? If so, which system is wrong / which version should be used? Thanks!

5 6

snapd applications not working on Tumbleweed (20230613)
by Jim Henderson 19 Jan '24

19 Jan '24

Wondering if anyone else is seeing this. I attempted to launch two apps (slack and spotify) installed with snapd, and the launch failed. Troubleshooting it, I removed all of the snaps from the system, uninstalled and reinstalled snapd, and I get the following output: --- $ snap install spotify error: cannot perform the following tasks: - Run configure hook of "spotify" snap if present (run hook "configure": ----- go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-dark-sea /snap/spotify/67/data-dir/themes/Matcha-dark-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Matcha-sea /snap/spotify/67/data-dir/themes/Matcha-sea none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-compact /snap/spotify/67/data-dir/themes/Materia-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark-compact /snap/spotify/67/data-dir/themes/Materia-dark-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-dark /snap/spotify/67/data-dir/themes/Materia-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light-compact /snap/spotify/67/data-dir/themes/Materia-light-compact none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia-light /snap/spotify/67/data-dir/themes/Materia-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Materia /snap/spotify/67/data-dir/themes/Materia none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiance /snap/spotify/67/data-dir/themes/Radiance none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Radiant-MATE /snap/spotify/67/data-dir/themes/Radiant-MATE none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-dark /snap/spotify/67/data-dir/themes/Yaru-MATE-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-light /snap/spotify/67/data-dir/themes/Yaru-MATE-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark-dark /snap/spotify/67/data-dir/themes/Yaru-bark-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-bark /snap/spotify/67/data-dir/themes/Yaru-bark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue-dark /snap/spotify/67/data-dir/themes/Yaru-blue-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-blue /snap/spotify/67/data-dir/themes/Yaru-blue none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-dark /snap/spotify/67/data-dir/themes/Yaru-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-light /snap/spotify/67/data-dir/themes/Yaru-light none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta-dark /snap/spotify/67/data-dir/themes/Yaru-magenta-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-magenta /snap/spotify/67/data-dir/themes/Yaru-magenta none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate-dark /snap/spotify/67/data-dir/themes/Yaru-mate-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-mate /snap/spotify/67/data-dir/themes/Yaru-mate none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive-dark /snap/spotify/67/data-dir/themes/Yaru-olive-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-olive /snap/spotify/67/data-dir/themes/Yaru-olive none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen-dark /snap/spotify/67/data-dir/themes/Yaru-prussiangreen-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen /snap/spotify/67/data-dir/themes/Yaru-prussiangreen none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple-dark /snap/spotify/67/data-dir/themes/Yaru-purple-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-purple /snap/spotify/67/data-dir/themes/Yaru-purple none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red-dark /snap/spotify/67/data-dir/themes/Yaru-red-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-red /snap/spotify/67/data-dir/themes/Yaru-red none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage-dark /snap/spotify/67/data-dir/themes/Yaru-sage-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-sage /snap/spotify/67/data-dir/themes/Yaru-sage none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian-dark /snap/spotify/67/data-dir/themes/Yaru-viridian-dark none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru-viridian /snap/spotify/67/data-dir/themes/Yaru-viridian none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/Yaru /snap/spotify/67/data-dir/themes/Yaru none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied update.go:85: cannot change mount namespace according to change mount (/snap/gtk-common-themes/1535/share/themes/elementary /snap/spotify/67/data-dir/themes/elementary none bind,ro 0 0): cannot create writable mimic over "/snap/spotify/67/data-dir/themes": permission denied cannot update snap namespace: cannot create writable mimic over "/usr/lib/x86_64-linux-gnu": permission denied snap-update-ns failed with code 1 -----) --- The execution of both programs prior to the reinstallation did the same thing. I did note that /usr/lib/x86_64-linux-gnu does not exist on my system. Happy to report a bug on bugzilla, but wanted to see if anyone else had noticed this. -- Jim Henderson Please keep on-topic replies on the list so everyone benefits

5 10

[TESTERS WANTED] Using git to maintain packages on OBS - test run
by Dan Čermák 08 Dec '23

08 Dec '23

Dear packagers for openSUSE Tumbleweed, we have been working on a prototype that allows you to maintain your packages in git (similarly to Fedora's dist git) on src.opensuse.org instead of on OBS. Contributions to the package are then handled via pull requests on src.opensuse.org which get automatically forwarded as submitrequests on OBS. This is currently just a prototype and we are looking for testers and general feedback. So if you want to participate as a maintainer, please check the full guide here: https://opensuse.github.io/scm-staging/user_guide.html tl;dr; you'll have to convert the develpackage to use `<scmsync>` from src.opensuse.org/pool and everything else should "just work". FAQ: - Where can I report issues or provide feedback? https://github.com/openSUSE/scm-staging/issues (for bugs) or https://github.com/openSUSE/scm-staging/discussions (for general feedback) - Is this how the future of packaging in openSUSE is going to look like? Maybe, maybe not. This is currently just a test drive and its outcome will influence the way forward. - Will submitrequests to my develpackage still work? Sadly no, branching a git maintained package on OBS does not work. Please indicate in the description of your package that users should contribute on src.opensuse.org instead. - Which tools do I need? Just git, git-lfs and osc (at least version 1.2.0 is recommended for service runs to work) Looking forward to your feedback! Dan -- Dan Čermák <dcermak(a)suse.com> Software Engineer Development tools SUSE Software Solutions Germany GmbH Frankenstrasse 146 90461 Nürnberg Germany (HRB 36809, AG Nürnberg) Managing Director/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman

23 66

Disk auto-unlocking with TPM 2.0
by Gary Lin 10 Oct '23

10 Oct '23

Hi, I'm pleased to introduce a new feature for openSUSE Tumbleweed: disk auto-unlocking with TPM 2.0. In short, it boots the encrypted root without asking for a passphrase. This feature is already integrated into Agama on ALP and we plan to merge it into yast-installation (*1). For now, if you're interested, just type a few commands to enable it. The hard requirements are LUKS2 partition(s), UEFI with Secure Boot enabled, and, of course, TPM 2.0. LUKS2 support in yast-installation is still experimental and needs a few extra steps. You could also choose to convert the existing LUKS1 partition to a LUKS2 one. The LUKS2 setup is addressed in the following link: https://en.opensuse.org/SDB:Encrypted_root_file_system#Setup_LUKS2_partitio… First of all, please update all packages, especially shim and grub2. The key package is fde-tools. Currently, there is a minor issue that the TCTI for native devices may not be installed, and the fix is on the way(*2). So, please install fde-tools along with libtss2-tcti-device0 for the time being. # zypper in fde-tools libtss2-tcti-device0 After installing fde-tools, you can test the TPM 2.0 support with # fdectl tpm-present If there is no error, it's time to seal a new random key for your root partition: # fdectl regenerate-key This command will request the passphrase of the root partition to enroll a new random key, seal the random key with TPM, and then update the grub configuration. Next, reboot your system. If everything is setup correctly, the system will boot without showing the passphrase prompt. One thing to be noted is that after a boot component upgrade, such as shim, grub2, or UEFI firmware, the signature in the sealed key may become invalid, and then you have to run the following command to update the signature. # fdectl tpm-authorize We are still working on a solution to update the signature automatically after shim and grub2 update to reduce such hassles. By default, 'fdectl' only manages the keyslots of the root partition. To extend the keyslot management to other partitions such as swap, please check https://en.opensuse.org/SDB:Encrypted_root_file_system#Additional_steps_for… A complete document is available here: https://en.opensuse.org/SDB:Encrypted_root_file_system#Unattended_boot_with… In case you encounter any issue, feel free to file a bug and assign it to bootloader-maintainers(a)suse.de Cheers, Gary Lin (*1) https://github.com/yast/yast-installation/issues/1088 (*2) https://build.opensuse.org/request/show/1100949

17 32

Leap not more useful for WebServer with php
by Walddys Emmanuel Dorrejo Céspedes 09 Oct '23

09 Oct '23

Leap is stuck with PHP 8.0 version, when most devs and project have move to php8.1/8.2, i was hoping that php8.1 at least this version reach leap 15.5, but didn't reached the main repo. sad.

6 6

Changes to dbus packaging (Some Attention maybe required).
by Simon Lees 04 Oct '23

04 Oct '23

Hi All, For Tumbleweed and ALP we plan to follow Red Hat / Fedora / Debian and move from dbus-daemon to dbus-broker as it has a number of advantages and is what upstream is now focusing on. While one of the goals here is to provide the same user experience there will be a couple of changes that will likely require adjustments in a few packages. 1. tools such as dbus-send and dbus-uuid will no longer be installed by default on all systems (we have many use cases that will simply no longer need them and this follows other distro's). Currently the package dbus-1-tools exists and is required by dbus-1 but that will change maybe to a recommends so if you know your package needs one of these tools you can add the Requires there now, otherwise I plan to go through and look at debian and fedora to try and find any packages that need this requires before it becomes optional for dbus. 2. The symlink from /etc/machine-id to /var/lib/dbus/machine-id will no longer be present on all machines and software should be adapted to use /etc/machine-id from systemd rather then the dbus copy. Again this has already happened for Debian and Fedora so hopefully many upstreams have already adapted to this. I'll outline the plan / timeline below. 1. Currently - dbus-broker has been in the distro for quite some time and the dbus-1 package has already been split up and we are at the point of asking people nicely to start testing (instructions below), myself and at least several other people have already been testing this without issues. 2. In 2-3 weeks if I don't hear of any issues we will update the systemd presets to enable dbus-broker rather then dbus-daemon. 3. Unless someone indicates they really want to keep maintaining dbus-daemon and have good reasons for doing so I will make dbus-daemon uninstallable. 4. Once we have done the work to ensure that as many packages that use dbus-send and other tools require the tools package we will drop the requires for dbus-tools from the dbus package. Instead it will probably move to being a Recommends in one of the patterns so it still ends up on most users machines. Switching to dbus-broker: Run the following as root zypper in dbus-broker systemctl disable dbus systemctl enable dbus-broker systemctl --global disable dbus systemctl --global enable dbus-broker https://www.mail-archive.com/debian-policy@lists.debian.org/msg35437.html https://fedoraproject.org/wiki/Changes/DbusBrokerAsTheDefaultDbusImplementa… -- Simon Lees (Simotek) http://simotek.net Emergency Update Team keybase.io/simotek SUSE Linux Adelaide Australia, UTC+10:30 GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

4 6

Off topic: Can't log in to Bugzilla
by Mark Rubin 23 Sep '23

23 Sep '23

I believe I have a login at https://bugzilla.opensuse.org/ with the same username and password that I use here and at https://forums.opensuse.org/. It works at both those sites, and used to work at Bugzilla although the last time I used it there was several years ago. Bugzilla seems to know me, but when I try to log in using "openSUSE_IDP Log In" (the only choice) it rejects me, before asking for username/password/etc, with "There is already an account with the login name <my email address>". I did a password reset, and got a token in my email which it accepted back along with a new password, which then brought me to a page ending with my info and "Your profile is up to date". But I can't continue to the site from there, and trying to log in again restarts the same "already an account" loop. If anyone has any suggestions, or a way to contact the Bugzilla administrators to plead my case, I'd appreciate it. I have some new information to post there regarding my thread here, plus another new/verifiable bug to report. It's very frustrating to be trying to contribute (in some small way) to openSUSE only to get blocked by things like this.

7 16

RFC: turn off ppc32 and ppc64 big endian builds on openSUSE:Factory:PowerPC
by Dirk Müller 14 Sep '23

14 Sep '23

Hi all, recently I was made aware that openSUSE:Factory:PowerPC is quite a large distribution as it is building for ppc 32bit, ppc64 big endian and ppc64 little endian. in OpenQA as far as I know we are only testing the ppc64 little endian builds. Given the upcoming data center move and the lack of testing, are there any concerns about turning off the builds for ppc 32bit and ppc64 big endian? It would reduce build power needs as well as disk storage /publishing bandwidth which is shared with other distributions and architectures and becomes a problem because of PowerPC being exceptionally large. Thanks a lot in advance for any insight you can provide, Greetings, Dirk

10 26

Packages in OBS not configured for Factory
by Roger Oberholtzer 28 Aug '23

28 Aug '23

I have a newbie question about the decision about what targets a package in OBS are built for. I mean about the logic behind the choice of which to enable. I quite often find that packages are enabled for only 15.2, or only Tumblwweed. But it is quite common that the packages are not enabled for all current openSUSE/SUSE releases. For exampl (not a complaints against this ptroject! I just happen to be following the status of the tensorflow2 and it took me here as a unresolvable package): https://build.opensuse.org/package/show/devel%3Alanguages%3Apython/python-g… Why would a project in devel:languages:python not have Factory enabled? I know that in user's own builds, them might unfortunately do this. But in a place like devel:languages:python, I would have thought the all current openSUSE/SUSE targets would generally be enabled. If it is a 'I don't have time' thing, then I'm okay with that. No problem. I am curious if it is something else that I have just not cottoned on to. -- Roger Oberholtzer

6 14

Announcement list for new TW snapshots?
by Pablo Sanchez 07 Aug '23

07 Aug '23

Hi everyone, Perhaps my mailing list searching -fu is not up to snuff .. I'm searching for an announcement-only mailing list for new Tumbleweed snapshots. If no such list exists, can we create one? The list would only allow the following posts (from Dimstar .. :): * New Tumbleweed snapshot ... * Tumbleweed - Review of the week .. What do people think? --- Pablo

17 32

New Laptop
by Leandro Almeida 02 Aug '23

02 Aug '23

Hello, I wanted to ask openSUSE to add the drivers of my new laptop in the distribution, to get full performance, last longer battery etc I also wanted to suggest to OpenSUSE, to add better general support in hardware acceleration, audio, GPU, av1, vp9, avc, etc Also OpenSUSE adds by default vm.max_map_count 2147483642 (MAX_INT – 5), for proton steam play vulkan to flow better, games with huge maps to flow better, fps increase etc. And better Steam support from snap packages, official steam too 👍👍😄 Lenovo IdeaPad 3 15ITL6 Intel Core i3 1115g4 (4) 4100GHz Intel Tiger Lake-LP GT2 (UHD Graphics G4) 1920x1080p 60Hz KDE Plasma Wayland PTBR UTF8 ABNT2 with numeric keypad OpenSUSE Tumbleweed 👍👍😄

8 11

Re: missing Tumbleweed snapshot release announcements
by Eric Schwarzenbach 01 Aug '23

01 Aug '23

On 7/31/23 14:12, Jan Engelhardt wrote: > On Monday 2023-07-31 18:34, Bernhard M. Wiedemann via openSUSE Factory wrote: > >> On 31/07/2023 18.17, Eric Schwarzenbach wrote: >>> Are these snapshot release announcements also posted anywhere on the web? >> You can get the missing ones with >> >> curl https://download.opensuse.org/tumbleweed/iso/Changes.20230727.txt >> curl https://download.opensuse.org/tumbleweed/iso/Changes.20230728.txt > https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/ Yes, I referred to these archives in my first message. The archive shows a gap between July 28 and 31 and has no notifications for the two snapshots that Bernhard kindly gave links for.

2 1

Re: Disk auto-unlocking with TPM 2.0
by Georg Schukat 01 Aug '23

01 Aug '23

> Am 31.07.2023 um 15:35 schrieb factory-request(a)lists.opensuse.org: > > Re: Disk auto-unlocking with TPM 2.0 > I set up a few remotely managed servers by moving all of the important > data to LUKS encrypted filesystems. These filesystems aren't in /etc/fstab > so they don't get mounted after a reboot. Once rebooted I remotely > SSH in and run a script that mounts the encrypted filesystem that prompts > for the password. It then starts the appropriate daemons (Postgresql, etc) > and everything is fine. I know there's a possibility of data leakage > via /tmp and swap, but I think the risk is minimal and the servers are in > a protected space anyway. I wonder if swap and /tmp could be encrypted > this way too, it might be fun to fiddle with it someday? > > So the basic idea is to set up a server so that it partially boots, but boots > far enough to set up the network and start the SSH daemon. Then, log > in remotely to finish the rest of the boot after entering the LUKS password. > Could something like this be added to the Leap install process to make it > easier to set up? > > Regards, > Lew > You can go further, a sshd can be started from grub. I have 2 servers running in that mode. My logs how I did set that up are not 100% complete so I can only give hints. Core component is the package dracut-sshd For documentation see: https://github.com/gsauthof/dracut-sshd It shows you several options how to setup your remote server. In general either use early networkd or setup your network in the initrd command line. Further documentation about network configuration within initrd can be found at the "other Linux" site: https://www.redhat.com/sysadmin/network-confi-initrd Would be then similar to: in `/etc/default/grub` modify `GRUB_CMDLINE_LINUX` to include network configs: E.g. GRUB_CMDLINE_LINUX="rd.neednet=1 ip=..." Furtheron you have to create ssh client keyfiles and integrate the public key file into the servers list of known client keys. Details see above mentioned docs That way all partitions besides boot and boot/efi can be encrypted at boot and you get this nice boot prompt when you ssh into that server at boot: Welcome to the early boot SSH environment. You may type systemd-tty-ask-password-agent (or press "arrow up") to unlock your disks. This shell will terminate automatically a few seconds after the unlocking process has succeeded and when the boot proceeds. If you do so you will be prompted for the password of one encrypted disk, more if they have different ones. Grub will decrypt now the disks the same way if you would have entered the passwords sitting at the console.

3 2

Re: New Tumbleweed snapshot 20230730 released!
by Eric Schwarzenbach 31 Jul '23

31 Jul '23

Are these snapshot release announcements also posted anywhere on the web? It appears to me one or more of them may have been lost (was the list down for a couple days?). The last previous to this I received or see in the list archives was 20230724, though I got 20230728 the other day doing a zypper dup.

3 2

pipewire-alsa requires removal of alsa-plugins-pulse
by Freek de Kruijf 31 Jul '23

31 Jul '23

When performing a "zypper dup" pipewire-alsa requires removal of alsa-plugins- pulse, but this package is required by quite a lot of other packages. How to solve this? -- fr.gr. member openSUSE Freek de Kruijf

3 2

New Tumbleweed snapshot 20230730 released!
by Dominique Leuenberger 31 Jul '23

31 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (115.0.2 -> 115.0.3) curl (8.2.0 -> 8.2.1) libqt5-qtwebengine libzypp (17.31.15 -> 17.31.17) miniupnpc (2.2.4 -> 2.2.5) mozilla-nss ncurses (6.4.20230701 -> 6.4.20230715) perl-File-Listing (6.15 -> 6.160.0) pipewire (0.3.75 -> 0.3.76) publicsuffix (20230709 -> 20230717) python-reportlab re2-10 selinux-policy (20230622 -> 20230728) systemd wireless-regdb (20230601 -> 20230721) yast2-firstboot (4.6.0 -> 4.6.1) yast2-users (4.6.2 -> 4.6.4) zypper (1.14.61 -> 1.14.62) === Details === ==== MozillaFirefox ==== Version update (115.0.2 -> 115.0.3) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 115.0.3 * fixes for other platforms - remove bashisms from firefox startup script (boo#1213657) ==== curl ==== Version update (8.2.0 -> 8.2.1) Subpackages: libcurl4 - Update to 8.2.1: * Bugfixes: - cfilters: rename close/connect functions to avoid clashes - ciphers.d: put URL in first column - cmake: add 'libcurlu'/'libcurltool' for unit tests - cmake: update ngtcp2 detection - configure: check for nghttp2_session_get_stream_local_window_size - docs: mark two TLS options for TLS, not SSL - docs: provide more see also for cipher options - hostip: return IPv6 first for localhost resolves - http2: fix regression on upload EOF handling - http: VLH, very large header test and fixes - libcurl-errors.3: add CURLUE_OK - os400: correct EXPECTED_STRING_LASTZEROTERMINATED - quiche: fix lookup of transfer at multi - quiche: fix segfault and other things - rustls: update rustls-ffi 0.10.0 - socks: print ipv6 address within brackets - src/mkhelp: strip off escape sequences - tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T - transfer: do not clear the credentials on redirect to absolute URL - unittest: remove unneeded *_LDADD - websocket: rename arguments/variables to match docs ==== libqt5-qtwebengine ==== - build with older re2 on Tumbleweed, the upcoming re2 2023-07-01 breaks qtwebengine ==== libzypp ==== Version update (17.31.15 -> 17.31.17) - Fix wrong filesize exceeded dl abort in zyppng::Downloader (bsc#1213673) In some cases when downloading very small files we can run into issues when the URL is protected by credentials. - version 17.31.17 (22) - Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231) - NetworkRequestManager: assert cookie file has mode 0600 (bsc#1158763) - Don't cleanup orphaned dirs if read-only mode was promised (bsc#1210740) - version 17.31.16 (22) ==== miniupnpc ==== Version update (2.2.4 -> 2.2.5) - update to 2.2.5: * GetListOfPortMappings NewStartPort 0 => 1 * CheckPinholeWorking is optional * add 60x errors from UPnP Device Architecture * cmake: install binaries, man pages and external-ip.sh - drop python2 support ==== mozilla-nss ==== Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - Fix file conflict for pp manual page [bsc#1213281] ==== ncurses ==== Version update (6.4.20230701 -> 6.4.20230715) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230715 + correct wadd_wch_literal() when adding a non-spacing character to a double-width character. + improve manual page for curs_util. + improve manual page for wadd_wch(). - Add ncurses patch 20230708 + add linux+kbs for terminals which imitate xterm's behavior with Linux -TD + modify MinGW driver to return KEY_BACKSPACE when an unmodified VK_BACK virtual key is entered (prompted by patch by Pavel Fedin, Savannah #64292). + disallow using $TERMINFO or $HOME/.terminfo when tic "-o" option is used (report by Sven Joachim, Debian #1040048). - Port the patch ncurses-6.4.dif ==== perl-File-Listing ==== Version update (6.15 -> 6.160.0) - updated to 6.16 see /usr/share/doc/packages/perl-File-Listing/Changes 6.16 2023-07-12 15:22:25 -0600 - Support dosftp listings with four-digit years (gh#3, gh#26) ==== pipewire ==== Version update (0.3.75 -> 0.3.76) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.76: * Highlights - Fix a regression that would cause the MPV pipewire backend to fail because of a spurious thread-loop signal. - Fix a crash when DBus is not found. - ALSA hires timestamps are now disabled by default. - Some more fixes and improvements. * PipeWire - A new option was added to pw-thread-loop to signal when the thread starts. - This is only used in module-rt to avoid regressions in mpv. (#3374) - Fix a compilation problem. - Stream flags now only set the properties when not already set. This fixes a regression with node autoconnect. (#3382) * Tools - pw-cat will now stop when the stream is disconnected. (#2731) - Improve the pw-cat man page, mention that stdin/stdout handling is only on raw data. * modules - module-rt will now not crash when dbus is not available but error out as before. - A new VBAN (vb-audio.com) sender and receiver was added. (#3380) * SPA - Add an option in audioconvert to disable volume updates. (#3361) - ALSA hires timestamps are disabled by default because many drivers seem to give wrong timestamps and cause extra delay. * bluetooth - LE Audio support is now enabled by default when liblc3 is available now that bluez has support for detecting the hardware features. ==== publicsuffix ==== Version update (20230709 -> 20230717) - Update to version 20230717: * Domains are removed `hidora.com`, `users.scale.virtualcloud.com.br`, `clicketcloud.com` (#1598) * Add storipress.app (#1583) ==== python-reportlab ==== - Add %{?sle15_python_module_pythons} ==== re2-10 ==== - legacy lib package forked from re2, for libqt5-qtwebengine ==== selinux-policy ==== Version update (20230622 -> 20230728) Subpackages: selinux-policy-targeted - Update to version 20230728: * Allow kdump_t to manage symlinks under kdump_var_lib_t (bsc#1213721) * allow haveged to manage tmpfs directories (bsc#1213594) ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-boot systemd-container systemd-coredump systemd-lang udev - Drop 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch /etc/hostname is supposed to contain the static host name of the system. This patch was used to work around cases where users incorrectly save the FQDN instead. However this is incorrect and not consistent with what systemd-hostnamed does and what other distributions do. Also assuming that /etc/hostname will contain the system host name only removes any ambiguities since the host name can contain a period. /etc/hosts is usually where one sets the domain name by aliasing the host name to the FQDN. Note that the installer used to save the FQDN in /etc/hostname but this has been fixed since several years now (bsc#972463). - systemd-homed is no more considered as experimental It's been moved to its own dedicated sub-package "systemd-homed". - systemd-userdb is no more considered as experimental (jsc#PED-2668) As such it's been moved to the main package. ==== wireless-regdb ==== Version update (20230601 -> 20230721) - Update to version 20230721: * wireless-regdb: Update regulatory info for TÃ¼rkiye (TR) * wireless-regdb: Update regulatory rules for Egypt (EG) from March 2022 guidelines ==== yast2-firstboot ==== Version update (4.6.0 -> 4.6.1) - Adapt users client to the changes in yast2-users (related to bsc#1206627). - 4.6.1 - Removed unnecessary executable flag from several files (bsc#1209094) ==== yast2-users ==== Version update (4.6.2 -> 4.6.4) - bsc#1211583 - do not pre-fill non-sense user password when going back after importing user - 4.6.4 - Allow to edit the NIS master server databases instead of the local ones, relying on the --prefix argument added to several commands in the "shadow" package (bsc#1206627). - 4.6.3 ==== zypper ==== Version update (1.14.61 -> 1.14.62) Subpackages: zypper-log zypper-needs-restarting - man: revised explanation of --force-resolution (bsc#1213557) Point out that the option not only allows to remove packages but may also violate any other active policy if there is no other way to resolve the job. - Print summary hint if policies were violated due to - -force-resolution (bsc#1213557) - BuildRequires: libzypp-devel >= 17.31.16 (for zypp-tui) - version 1.14.62

1 0

[opensuse-factory] reproducible builds status 2023-07
by Bernhard M. Wiedemann 31 Jul '23

31 Jul '23

Hi, Good news: after suffering from issues with python310, I finally managed to find the two required patches https://www.reddit.com/r/reproduciblebuilds/comments/1573d76/reproducible_p… and mcepl (our python packager) sent them towards Factory and SLE. I also worked with fstrba to make nice progress on xmvn UUIDs https://bugzilla.opensuse.org/show_bug.cgi?id=1162112 Meanwhile, the fix to ghc-rpm-macros is still waiting to be merged. https://github.com/opensuse-haskell/ghc-rpm-macros/pull/1 Add to that the doxygen toolchain fix https://build.opensuse.org/request/show/1099185 Once all four fixes above reached Factory, this should fix over half of the remaining issues. A few other major headaches like mono and javadoc still remain unpatched: https://github.com/mono/mono/issues/20172 https://bugzilla.opensuse.org/show_bug.cgi?id=1174795 Here are the autogenerated bits: last month's status: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… Last months' reproducible builds project updates (including my work): https://reproducible-builds.org/reports/2023-06/ I uploaded https://rb.zq1.de/compare.factory-20230731/ today https://rb.zq1.de/spec/glossar.txt explains the meaning of below values: total-packages: 14812 (+69) build-tried: 14776 (+67) build-failed: 74 (+4) build-n-a: 200 (+19) build-succeeded: 14503 (+42) build-official-failed+na: 109 (+36) build-compare-failed: 411 (-51) build-compare-succeeded: 14092 (+93) verify-failed: 687 (-172) verified-semi-reproducible: 11455 (-1831) bit-by-bit-identical: 13931 (+43) not-bit-by-bit-identical: 564 (-8) not-bit-by-bit-identicalcheck: 572 (-1) https://rb.zq1.de/compare.factory-20230731/graph.png shows the change over time https://rb.zq1.de/compare.factory-20230731/unreproduciblerings.txt lists very unreproducible core packages (bootstrap+DVD) Of the badly unreproducible packages, 4 were in ring0 43 were in ring1 That makes it 47/3206 => 1.47 % which is below the overall average of 411/14503 => 2.83 % 564/14503 => 3.89 % of packages are not perfectly reproducible package notes: ==> ./alex/.rb.notes <== ghc toolchain parallelism ==> ./c3p0/.rb.notes <== strip-nondeterminism, minor #= https://github.com/swaldman/c3p0/issues/163 date+time ; ?bug? order issues ; orphaned ==> ./cockpit-machines/.rb.notes <== => https://github.com/cockpit-project/cockpit/pull/18994 gzip mtime /usr/share/cockpit/machines/index.css.gz ==> ./deno/.rb.notes <== rust toolchain? binary order ==> ./fasterxml-oss-parent/.rb.notes <== mvn toolchain random UUID ==> ./gh/.rb.notes <== found range good=1704505952 bad=1704507877 (2024-01-06T02:24:37) #= https://github.com/cli/cli/issues/6259 FTBFS-2023 ==> ./git-interactive-rebase-tool/.rb.notes <== => https://github.com/MitMaro/git-interactive-rebase-tool/pull/881 date --- old /usr/bin/interactive-rebase-tool (objdump) ==> ./glucat/.rb.notes <== pdf /usr/share/doc/packages/glucat-doc/GluCat-API-reference-manual.pdf ==> ./gnutls/.rb.notes <== FTBFS --build-opt=--vm-custom-opt=-rtc base=2038-01-25T00:00:00 failed FAIL: gost.sh ==> ./golang-github-prometheus-prometheus/.rb.notes <== TODO: https://github.com/prometheus/promu => https://github.com/prometheus/prometheus/pull/12515 user host date ==> ./gstreamer-plugins-rs/.rb.notes <== rust/llvm asm diff variations in /usr/lib64/pkgconfig/gstwebrtchttp.pc ==> ./gtk2hs-buildtools/.rb.notes <== ghc toolchain parallelism ==> ./gutenprint/.rb.notes <== => https://sourceforge.net/p/gimp-print/source/merge-requests/2/ date+time +++ new//usr/lib64/gutenprint/5.3/config.summary 2023-04-22 00:00:00.000000000 +0000 ==> ./helix/.rb.notes <== rust: parallelism into machine code? +++ new /usr/lib64/helix/hx (disasm) ==> ./hledger-interest/.rb.notes <== ghc toolchain --- old /usr/bin/hledger-interest (objdump) ==> ./httpie/.rb.notes <== FTBFS-SSL ==> ./intel-graphics-compiler/.rb.notes <== ASLR order issues in /home/abuild/rpmbuild/BUILD/build/install_manifest.txt ==> ./jackson-parent/.rb.notes <== java maven xmvn random uuid ==> ./java-20-openjdk/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1213796 FTBFS-2032 found range good=1987887184 bad=1987889714 (2032-12-28T23:35:14) ==> ./kubernetes1.26/.rb.notes <== random go tmp build path ==> ./kxml/.rb.notes <== java maven random UUID, javadoc +++ new//usr/share/maven-metadata/kxml.xml 2019-05-03 12:00:00.000000000 +0000 ==> ./libarchive/.rb.notes <== => SR 1100254 version update with below fixes => https://github.com/libarchive/libarchive/pull/1836 FTBFS-2038 ==> ./libgav1/.rb.notes <== FTBFS-cpu [ 853s] 4 - common_avx2_test (ILLEGAL) ==> ./mage/.rb.notes <== => https://github.com/magefile/mage/pull/474 date+time ; golang from .goreleaser.yml: ldflags: -s -w -X github.com/magefile/mage/mage.timestamp={{.Date}} -X github.com/magefile/mage/mage.commitHash={{.Commit}} -X github.com/magefile/mage/mage.gitTag={{.Version}} ==> ./memtest86+/.rb.notes <== /boot/efi/EFI/memtest86/memtest.efi differs at offset '292' (Linux/x86 Kernel, Setup Version 0x20c, bzImage, Version Memtest86+ v6.10, RW-rootFS) --- old /boot/efi/EFI/memtest86/memtest.efi (hex) ==> ./meson/.rb.notes <== /usr/lib/rpm/macros.d/macros.meson smp ==> ./mhvtl/.rb.notes <== tar/gz /usr/lib/firmware/mhvtl/mhvtl_kernel.tgz ==> ./mumble/.rb.notes <== #=> https://github.com/mumble-voip/mumble/pull/6147 filesys (python listdir) in /home/abuild/rpmbuild/BUILD/mumble-1.5.517/build/src/mumble/mumble_client_object_lib_autogen/IZWCZGADZF/qrc_mumble_flags.cpp 2023-06-09 05:38:14.144000000 +0000 ==> ./nyxt/.rb.notes <== nyxt binary varies by pid=2536 dir=/home/abuild/rpmbuild/BUILD/nyxt-3.2.1/ exec="/usr/bin/sbcl" ["sbcl" "--dynamic-space-size" "3072" "--no-userinit" "--non-interactive" "--eval" "(require \"asdf\")" "--eval" "(when (string= \"true\" \"true\") (setf asdf:*default-source-registries* (list (quote asdf/source-registry:environment-source-registry))) (asdf:clear-configuration) (asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//libraries/nasdf/nasdf.asd\") (asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//nyxt.asd\") (asdf:load-system :nyxt/submodules))" "--eval" "(asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//libraries/nasdf/nasdf.asd\")" "--eval" "(asdf:load-asd \"/home/abuild/rpmbuild/BUILD/nyxt-3.2.1//nyxt.asd\")" "--eval" "(format t \"~&; NASDF ~a: ~a~&\" (asdf:component-version (asdf:find-system :nasdf)) (nth-value 2 (asdf:locate-system :nasdf)))" "--eval" "(when (find-package :ql) (funcall (read-from-string \"ql:quickload\") :cffi))" "--eval" "(when (and (find-package :cffi) (uiop:getenv \"GUIX_ENVIRONMENT\")) (pushnew (pathname (format nil \"~a/lib/\" (uiop:getenv \"GUIX_ENVIRONMENT\"))) (symbol-value (read-from-string \"cffi:*foreign-library-directories*\" )) :test (quote equal)))" "--eval" "(asdf:load-system :nyxt/gi-gtk-application)" "--eval" "(asdf:make :nyxt/install)" "--eval" "(uiop:quit)"] - started ==> ./osgi-service-jdbc/.rb.notes <== java pom date+time ==> ./pcr-oracle/.rb.notes <== #=> https://github.com/okirch/pcr-oracle/pull/29 date (shell) in /usr/share/man/man8/pcr-oracle.8.gz ==> ./photoqt/.rb.notes <== Qt qrc mtimes /home/abuild/rpmbuild/BUILD/photoqt-1.7/build/qrc_lang.cpp ==> ./procmeter/.rb.notes <== parallelism race ==> ./pympress/.rb.notes <== date+time from python-Babel : fix in rb:test --- old /usr/lib/python3.11/site-packages/pympress/share/locale/zh_TW/LC_MESSAGES/pympress.mo (hex) ==> ./python3-pyside6/.rb.notes <== _smp_build_ncpus embedded in .src.rpm https://github.com/rpm-software-management/rpm/issues/2343 ASLR ==> ./python-bpython/.rb.notes <== => SR 1100750 drop sphinx doctrees ==> ./python-control/.rb.notes <== = https://github.com/python-control/python-control/issues/927 FTBFS-j4 osc build --noservice --vm-type=kvm -j4 standard ==> ./python-cx_Freeze/.rb.notes <== #=> SR 1100867 version upgrade for FTBFS-2038 #=> https://github.com/marcelotduarte/cx_Freeze/pull/1860 FTBFS-2038 ==> ./python-Django/.rb.notes <== #=> https://github.com/django/django/pull/16459 FTBFS-2038 #=> https://github.com/django/django/pull/10994 FTBFS-2028 to 2038 ==> ./python-enaml/.rb.notes <== #=> https://github.com/nucleic/enaml/pull/516 FTBFS-2038 osc build --vm-type=kvm --noservice --clean --build-opt=--vm-custom-opt="-rtc base=2038-02-01T18:00:00" standard ==> ./python-flup/.rb.notes <== => SR 1101194 python-flup drop sphinx doctrees ==> ./python-gns3fy/.rb.notes <== FTBFS-20xx? ==> ./python-HyperKitty/.rb.notes <== toolchain issue? nothing helps from ["python3.11", "build_static_files/manage.py", "compress", "--force"] ==> ./python-iminuit/.rb.notes <== numba toolchain issue #=> https://github.com/scikit-hep/iminuit/pull/355 readdir (python glob for distutil) ==> ./python-librosa/.rb.notes <== unknown numba toolchain issue /usr/lib/python3.9/site-packages/librosa/util/__pycache__/utils.__shear_dense-1846.py39.nbi differs at offset '38' (XENIX 8086 relocatable or 80286 small model) ==> ./python-mpi4py/.rb.notes <== = https://bugzilla.suse.com/show_bug.cgi?id=1212698 lto+parallelism into debug # filterdiff hexdump\ -C R*/usr/lib64/python3.9/site-packages/mpi4py/MPI.cpython-39-x86_64-linux-gnu.so ==> ./python-mysqlclient/.rb.notes <== => SR 1100753 drop sphinx doctrees ==> ./python-pandas/.rb.notes <== random .pyc - ref counters? ==> ./python-pyface/.rb.notes <== = https://github.com/enthought/pyface/issues/1254 date+time ==> ./python-quantities/.rb.notes <== = https://github.com/python-quantities/python-quantities/issues/225 date+time in /usr/lib/python3.9/site-packages/quantities/constants/_codata.py ==> ./python-rdflib/.rb.notes <== toolchain? random Graph identifier ==> ./python-scikit-learn/.rb.notes <== parallelism via cython+openmp - similar to https://github.com/yt-project/yt/issues/4611 random FTBFS-j4 on bernhards ==> ./python-scipy/.rb.notes <== = https://github.com/scipy/scipy/issues/18987 date+time ; todo random mesonpy +++ new /usr/lib/hpc/gnu13/python-scipy/1.10.1/lib64/python3.9/site-packages/scipy/stats/_stats_pythran.cpython-39-x86_64-linux-gnu.so (objdump) ==> ./python-Telethon/.rb.notes <== => https://github.com/LonamiWebs/Telethon/pull/4163 sort order in /usr/lib/python3.9/site-packages/telethon/tl/alltlobjects.py from telethon_generator/generators/tlobject.py ==> ./python-toolz/.rb.notes <== other python3 pyc toolchain ASLR ; needs bpo-37596: Make `set` and `frozenset` marshalling deterministic (GH-27926) ==> ./python-waitress/.rb.notes <== => SR 1100756 Drop sphinx doctrees ==> ./python-WebOb/.rb.notes <== => SR 1100758 python-WebOb drop sphinx doctrees ==> ./python-WebTest/.rb.notes <== 1100760 python-WebTest drop sphinx doctrees ==> ./python-xarray-einstats/.rb.notes <== numba toolchain issue ==> ./python-yt/.rb.notes <== = https://github.com/yt-project/yt/issues/4611 parallelism => https://github.com/yt-project/yt/pull/4609 python filesys order ==> ./python-zeep/.rb.notes <== python .pyc ASLR (+readdir?) ==> ./python-zope.deprecation/.rb.notes <== => SR 1100560 drop sphinx doctrees ==> ./python-zope.event/.rb.notes <== => SR 1100761 python-zope.event drop sphinx doctrees ==> ./python-zope.hookable/.rb.notes <== => SR 1100764 python-zope.hookable drop sphinx doctrees ==> ./python-zope.i18nmessageid/.rb.notes <== => SR 1100765 python-zope.i18nmessageid drop sphinx doctrees ==> ./runc/.rb.notes <== minor: filesys+aslr ==> ./s3fs/.rb.notes <== #=> https://github.com/s3fs-fuse/s3fs-fuse/pull/2026 date -/usr/share/man/man1/s3fs.1.gz ==> ./shadowsocks-rust/.rb.notes <== => https://github.com/AlephAlpha/build-time/pull/5 toolchain date+time +++ new /usr/bin/sslocal (objdump) ==> ./sharpfont/.rb.notes <== mono dll ==> ./sonatype-plugins-parent/.rb.notes <== java xmvn random uuid ==> ./sonic-pi/.rb.notes <== = https://bugzilla.opensuse.org/show_bug.cgi?id=1208969 FTBFS-2038 from app/server/beam/tau/test/erlang_tau_osc_test.exs ErlangTauOSCTest ==> ./starship/.rb.notes <== => https://github.com/starship/starship/pull/5352 filesys readdir, rust in /usr/bin/starship ==> ./xindy/.rb.notes <== = https://sourceforge.net/p/xindy/bugs/65/ report FTBFS-2036 osc build --vm-type=kvm --noservice --clean --build-opt=--vm-custom-opt="-rtc base=2036-02-07T06:30:00"

1 0

Trial to use a CDN for download.opensuse.org
by Dirk Müller 28 Jul '23

28 Jul '23

Hi all, For a while I've been working in the background to get a sponsored CDN subscription. I am happy to report that Fastly.com has agreed to sponsor the openSUSE project with bandwidth. We primarily intend to use it to improve the reachability (latency) of download.opensuse.org in various areas of the world, but of course can expand it to other usecases as well. Andrii, Bernhard and myself have set up an initial proof of concept under https://cdn.opensuse.org/ which you can now use and report issues with. just use it in place of download.opensuse.org in your zypper repositories or elsewhere. Ideally we would be providing the openSUSE Leap maintenance update repositories directly via the CDN, but that is currently not possible in how the setup is working. We intend to improve that over time but that will require fixes in various places including the Open Build Service itself (it can currently not handle more than one download site). Please don't spread the usage too widely, we're still in a "BETA" stage and need to implement some measures to keep bandwidth usage under control. Happy to hear about any feedback that you might have. Greetings, Dirk

14 29

Problem with build of VirtualBox in Leap 15.6
by Larry Finger 28 Jul '23

28 Jul '23

Hi, I tried to build BirtualBox under Leap 15.6 using the command osc build -M kmp --alternative-project openSUSE:Leap:15.6:Staging:adi:1 standard The build installed the packages and ended with: Verifying integrity of cached packages using keys from SUSE:SLE-15-SP3:Update, SUSE:SLE-15:GA, SUSE:SLE-15-SP4:GA, SUSE:SLE-15:Update, SUSE:SLE-15-SP4:Update, SUSE:SLE-15-SP3:GA, SUSE:SLE-15-SP5:GA, SUSE:SLE-15-SP5:Update, SUSE:SLE-15-SP1:Update, SUSE:SLE-15-SP2:Update, SUSE:SLE-15-SP2:GA, SUSE:SLE-15-SP1:GA, openSUSE:Leap:15.6, openSUSE:Backports warning: /var/tmp/osbuild-packagecache/openSUSE:Backports:SLE-15-SP6/standard/x86_64/kbuild-0.1.9998svn3110-bp156.3.1.x86_64.rpm: Header V3 RSA/SHA512 Signature, key ID 25db7ae0: NOKEY /var/tmp/osbuild-packagecache/openSUSE:Backports:SLE-15-SP6/standard/x86_64/kbuild-0.1.9998svn3110-bp156.3.1.x86_64.rpm : public key not available Is there something wrong with the kbuild package in 15.6? Thanks, Larry

4 7

openSUSE Release Engineering meeting 26.07.2023
by Lubos Kocman 26 Jul '23

26 Jul '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees RBrown, DimStar, lkocman,guillaumeg, anag, adrians, maxlin ## Leap The next hackweek will take place in the week of 6th November. Excited about https://grommunio.com/blog/grommunio-packages-in-opensuse-factory/ Deployments (100k users) like this makes me see the convenience for customer to simply register and migrate Leap to get support from SUSE. I helped NETitworks to apply for SUSE partnership. Meeting minutes: https://etherpad.opensuse.org/p/ReleaseEngineering-20230720-netitwork All reported feature requests against 15.6 were processed. https://code.opensuse.org/leap/features Filed several tasks regarding remaining setup of 15.6 (for QA, IT, autobuild, etc). So we give team enough heads up to e.g. plan for the openqa/maint setup around Beta timeframe, especially with all the work on ALP. Need to request Leap Micro 5.6 setup. Some work on openSUSE-repos to support the try-out CDN https://github.com/openSUSE/news-o-o/pull/180 ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 87 failed 5 unresolvable (last week: 90 failed, 1 unresolvable) https://tinyurl.com/ysy4nnnz * openQA migrated to the new data center; snpashots 0720 - 0723 were not tested/released * kernel 6.4.6 (with ZenBleed fix) in staging, should be available by end of the week * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 ## Richard (Aeon) Really want to get Aeon's own media out soon, but also taking care not to overwhealm OBS with endless experimental changes while the DC migration leaves us with lower resources So been focused on tidying up some organisational backlog https://aeondesktop.org/bugs is now a nice curated list of all open Aeon bugs. I plan to keep this list well managed in the future, maybe by using bots Feel free to file more bugs https://aeondesktop.org/reportbug Considering a structured approach to handling customisation to Aeon in relation to bug reports https://en.opensuse.org/Portal:Aeon/DevelopmentThoughts TL;DR - highest priority will always be given to bug reports from Aeon systems with no altered RPMs. - adding (most) packages from the official TW Repos / NVIDIA will still be supported but at a low priority - adding packages from anywhere else, or known-bad packages from TW Repos, will lead to bug reports from that system being handled with least priority. Userspace and bugzilla bot tooling needs to be written to impliment the above first. ## Richard (ALP Architecture) ALP-Leap-Replacement meeting minutes - https://etherpad.opensuse.org/p/weeklymeeting20230725 Summary - Few community discussions in the last month - 2 ongoing experiemntal concepts - Slowroll - basically a slower version of Tumbleweed to be less scary for Leap users - Linarite - basically a narrower, smaller Leap-like distribution, likely with less desktops and fewer packages, formerly GrassyKnoll - Limited progress to the "Slowroll" concept in the last month - No progress on Linraite since GrassyKnoll - Planning on doing a poll with the official election platform for Members only to get some indication as to whether Slowroll, Linarite, or not replacing Leap is where our contribution bases interest lies. Personal Note: Richard is concerned at the apparant lack of contributor interest in these efforts. Without more contributions we're not likely to have a great solution, or maybe any solution, for Leap users ## Max * Leap 15.6 and Backports-SLE15-SP6 are all good, we're lack of build power though, therefore we do only have enabled x86_64 build for now * The required Backports/Leap 15.6 checkers are running on botmaster * I did submitted package update from 15.5:Update and Backports:SLE-15- SP5:Update to 15.6/Backports:SLE-15-SP6 ## Guillaume - Arm Tumbleweed: * Rolling * gcc13 bug leading to build failure of highway (and maybe more) - https://bugzilla.opensuse.org/show_bug.cgi?id=1213647 * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 * armv6: python-setuptools-rust package fixed, so armv6 is now in better shapes - https://bugzilla.opensuse.org/show_bug.cgi?id=1213005 Leap: * 15.5 aarch64: kernel oops seen on openQA aarch64 workers - https://bugzilla.opensuse.org/show_bug.cgi?id=1213620 * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Not available Tumbleweed * running * small test issue related to system profile in the installation Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 (waiting for a simple Submit Approval of a Requires since 4 months!) -> Alternative submitting directly to zSystems if Maintainers do not respond -> Resolving https://bugzilla.opensuse.org/show_bug.cgi?id=1209438 https://build.opensuse.org/request/show/1078385 * Sarah is organizing access to IBM Z Security Portal regarding security fixes (Spectre v2and other things) -> waiting * SUSE/openSUSE zSystems meeting has happened * The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug Not available * Sponsorship of LinuxFest NorthWest from previous pre-covid sponsorship carries forward this year * Contact ddemaio if plan to attend or want to run a booth * https://linuxfestnorthwest.org/ * openSUSE Conference 2023 videos complete * Thank you c3voc & openSUSE Video Team * Scheduling video posts on social media * Project Clarity * Establishing a clear understanding of projects within the openSUSE Project umbrella and how new project will be identified, verified to be part of the openSUSE Project * Board will be taking this on (Rancher and Uyuni/SUSE Manager) was discussed in the board meeting earlier this week) * openSUSE.Asia Summit * Registrations 4, Submissions 5 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * openALT / Fall 2023 (invoice based) sponsorship approved by Anicka (10k CZK) - Dirk reminded us about OSCC still having some budget available * Trying to troubleshoot one TSP payments * Community meeting * Worked on project clarity & enhancing info on https://en.opensuse.org/openSUSE:How_to_contribute_to_Factory * EL Collaboration Meeting changed to once a month. Next is August 31 * GSoC * Mid-term evaluations complete with 100% Friday, July 14, by 18:00 UTC * openSUSE Boxes * Two companies are thinking about restarting with Start-Up Booklet * Stakeholders informed * Need to schedule followup meeting w/netitwork Static * Still need future storage location * AI topics (static) * Scraping of info & how it might affect costs is being dicussed by board * Dirk: There is a OSCC meetup today touching the topic * Board looking into using AI to help with possible moderation *** ddemaio will be unavailable for this meeting until the August 9 meeting starting next week ## Dirk Not available CDN contract with Fastly is signed, Fastly is sponsoring openSUSE project with CDN bandwidth Currently added as fallback mirror for North America, South America and Europe lkocman: Will this affect our download metrics? Dirk: Since we don't track downloads from instances other than download-o-o, and we're not switching download-o-o currently. So pretty much same state as before. Step 15.6/SP6 enablement for armv7 Various package updates like usual Added openSUSE Tumbleweed BCI images (SLE BCI images built for opensuse, available on registry.o.org) Location changed from registry.opensuse.org/bci/* to registry.opensuse.org/opensuse/bci/* BCI non-devel images are now available in openSUSE Registry, images are TW based. ## Wolfgang (Package Hub), Scott Bahling Not available Project openSUSE:Backpors:SLE-15-SP6 created in OBS (currently build disabled because of AC issues in SRV1, more build workers will be added latest tomorrow) Creating release package for SP6 (SUSE:Backports:SLE-15-SP6) today in IBS ## Maintenance team (Marcus or Maurizio (m4u)) Not available No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of July AC problems in Nüremberg with openQA servers ## Open Floor

1 0

ALP-Leap-replacement Architecture Meeting Minutes - 25 July 2023
by Richard Brown 25 Jul '23

25 Jul '23

ALP-Leap-replacement Architecture Meeting - https://en.opensuse.org/openSUSE:ALP/ArchitectureTeam Meetings take place on https://meet.opensuse.org/meeting and notes are available at https://etherpad.opensuse.org/p/weeklymeeting Participants: Richard, Lubos, Valentin, Marcus, Bernhard, Phoeinx, Knurpht, Rob, Emiliano, Ish, Dirk 1. Update from Richard: Communications - There has been NO communication on https://matrix.to/#/#alp:opensuse.org since July 1 Q from Richard - have discussions been happening elsewhere? A- There hasn't been much, but there has been some conversations. Richard needs to fix his Matrix client ;) but more people should join and discuss also. Ongoing efforts - there are currently 2 concepts for an ALP-Based-Leap Replacement https://en.opensuse.org/openSUSE:ALP/ArchitectureTeam#Experimental/Research… Linarite update - No progress yet Slowroll update- "I did a snapshot of a random Tumbleweed version (20230705) and setup OBS projects to build a package update ontop of it. That worked with some help from Adrian. During that we discovered that we will probably need an own project like openSUSE:Slowroll to have our own prjconf that can move independently of Factory/Tumbleweed. https://build.opensuse.org/projects/openSUSE:ALP:Experimental:Slowroll/meta I also started https://github.com/bmwiedemann/slowroll-tools that already provides data for a core-ness value for a given package. More tools should be added there later, e.g. to do heuristics on .changes files and code diffs to provide input to the required risk+benefit-assessment. One open question is if we want multiple overlapping slowroll versions. If most work is automated, that should not be much extra effort. Then we could have a slowroll-2023-07 followed by a slowroll-2024-01 with overlapping support periods so that sysadmins can dup on their own schedule. It could be like openSUSE before Leap (but with more automation to keep the work easy). I would like that." 2. Discussing concepts for additional Experiments/Research Projects No additional concepts raised 3. Any other buisness - Group mail from Max, is this another concept? Richard - doesn't seem to be, but does provide many good questions the group needs to consider. - Was recurring suggestions via YouTube and Reddit that openSUSE may not need a Leap replacement. What do we think as a group? A- To be kept in mind and maybe used as a question in poll (see below) Lubos - would like to see a solution for community to be able to touch the maintenance workflow Marcus - the group needs to define what the Leap replacement looks like before worrying about how to maintain it Richard - exactly - well if we did Slowroll, then we wouldn't have a maintenance workflow like the current Leap at all Phoenix - What does lifecylce mean in the context of Slowroll? Richard - Something along the lines of how often/how quickly after a package is in Tumbleweed does it appear in Slowroll Phoenix - But the metric of how often is a package updated is mostly irrelevant for a point release. Users expect a system to be installed and then mostly stay stable. The important question is "are packages maintained" and that does not necessarily align with packages being kept at bleeding edge Dirk - Also Packages in SLES are maintained which means, they will be updated when there is a reason for them to be updated. Lubos - Max tries to update all community packages in Leap 15.X few times during the development cycle. We have it as part of our release process. It's true that some of the SLES packages were not updated since SLES 15(.0):GA, these receive on demand updates typically requested via Jira or https://code.opensuse.org/leap/features Dirk - suggestion to create a poll to gain feedback on which concepts folk might like https://en.opensuse.org/Portal:15.5/Retrospective has plenty feedback on Leap 15.5 pros+cons Ish - the poll should be really specific, and it should be done for Members only, using the election platform. Ish volunteers to run it. AI - Richard, Lubos, Dirk to work on wording for Ish. Poll is likely to focus on the concepts we have on the table, namely Slowroll, Linarite, and not-replacing-Leap. Phoenix - Shares some thoughts - Leap users like Leap because they like a point release. If we give them a rolling release they'll probably just go to a different distro. Contributing to Leap is very difficult and gets in the way of a point release. The main thing contributions want to do is just add new packages, so, why not have a concept which is an expanded packagehub, which a much simpler contribution process. Richard - cool idea..it's not really different from openSUSE:Backports and would likely face the same challenges gathering contributions Lubos - you'll hit the problems we already hit..new package requires an update to FOO which blocks the change until the dependency can be updated in the next point release Richard - Exactly, this is why Tumbleweed has the concept of "To be able to change any one thing, we need to be able to change everything". Any point release model will effectively block such contributions for months or years at a time. Next meeting - after pool closing, TBA -- Richard Brown Distributions Architect SUSE Software Solutions Germany GmbH, Frankenstraße 146, D-90461 Nuremberg, Germany (HRB 36809, AG Nürnberg) Managing Directors/Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman

1 0

New Tumbleweed snapshot 20230724 released!
by Dominique Leuenberger 25 Jul '23

25 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: apache2-mod_php8 (8.2.7 -> 8.2.8) bind (9.18.16 -> 9.18.17) elfutils-debuginfod hwinfo (23.1 -> 23.2) kernel-source (6.4.3 -> 6.4.4) libshumate (1.0.4 -> 1.0.5) libva (2.18.0 -> 2.19.0) libva-gl (2.18.0 -> 2.19.0) libvirt netcontrol nghttp2 (1.54.0 -> 1.55.1) openssh (9.3p1 -> 9.3p2) openssh-askpass-gnome (9.3p1 -> 9.3p2) openssl-1_1 openssl-3 ovmf (202302 -> 202305) php8 (8.2.7 -> 8.2.8) python-rich qalculate (4.6.1 -> 4.7.0) sysuser-tools tar update-alternatives (1.21.8 -> 1.21.22) virtualbox (7.0.8 -> 7.0.10) virtualbox-kmp (7.0.8_k6.4.3_1 -> 7.0.10_k6.4.4_1) webkit2gtk3 (2.40.3 -> 2.40.4) webkit2gtk3-soup2 (2.40.3 -> 2.40.4) === Details === ==== apache2-mod_php8 ==== Version update (8.2.7 -> 8.2.8) - version update to 8.2.8 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.8 - modified patches % php-sort-filelist-phar.patch (refreshed) ==== bind ==== Version update (9.18.16 -> 9.18.17) Subpackages: bind-doc bind-utils - Update to release 9.18.17 Feature Changes: * If a response from an authoritative server has its RCODE set to FORMERR and contains an echoed EDNS COOKIE option that was present in the query, named now retries sending the query to the same server without an EDNS COOKIE option. * The relaxed QNAME minimization mode now uses NS records. This reduces the number of queries named makes when resolving, as it allows the non-existence of NS RRsets at non-referral nodes to be cached in addition to the normally cached referrals. Bug Fixes: * The ability to read HMAC-MD5 key files, which was accidentally lost in BIND 9.18.8, has been restored. * Several minor stability issues with the catalog zone implementation have been fixed. ==== elfutils-debuginfod ==== Subpackages: debuginfod-profile libdebuginfod1 - Replace libdebuginfo1 sub-package's debuginfod-profile Recommends with config(debuginfod-profile) Requires, but on the debuginfod-\ client sub-package, instead. And add binutils, bpftrace-tools, elfutils, gdb, perf, systemd-coredump, and valgrind Supplements to debuginfod-client sub-package. This should make installation of debuginfod-client more consistent, along with debuginfod-\ profile, with software/packages that have debuginfod support. ==== hwinfo ==== Version update (23.1 -> 23.2) Subpackages: libhd23 - merge gh#openSUSE/hwinfo#128 - Add support for loongarch cpu - 23.2 ==== kernel-source ==== Version update (6.4.3 -> 6.4.4) - Linux 6.4.4 (bsc#1012628). - start_kernel: Add __no_stack_protector function attribute (bsc#1012628). - USB: serial: option: add LARA-R6 01B PIDs (bsc#1012628). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (bsc#1012628). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (bsc#1012628). - extcon: usbc-tusb320: Unregister typec port on driver removal (bsc#1012628). - dt-bindings: iio: ad7192: Add mandatory reference voltage source (bsc#1012628). - iio: addac: ad74413: don't set DIN_SINK for functions other than digital input (bsc#1012628). - iio: adc: ad7192: Fix null ad7192_state pointer access (bsc#1012628). - iio: adc: ad7192: Fix internal/external clock selection (bsc#1012628). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (bsc#1012628). - iio: accel: fxls8962af: fixup buffer scan element type (bsc#1012628). - Revert "drm/amd/display: edp do not add non-edid timings" (bsc#1012628). - fs: pipe: reveal missing function protoypes (bsc#1012628). - s390/kasan: fix insecure W+X mapping warning (bsc#1012628). - blk-mq: don't queue plugged passthrough requests into scheduler (bsc#1012628). - block: Fix the type of the second bdev_op_is_zoned_write() argument (bsc#1012628). - block/rq_qos: protect rq_qos apis with a new lock (bsc#1012628). - splice: Fix filemap_splice_read() to use the correct inode (bsc#1012628). - erofs: kill hooked chains to avoid loops on deduplicated compressed images (bsc#1012628). - x86/resctrl: Only show tasks' pid in current pid namespace (bsc#1012628). - fsverity: use shash API instead of ahash API (bsc#1012628). - fsverity: don't use bio_first_page_all() in fsverity_verify_bio() (bsc#1012628). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1012628). - x86/sev: Fix calculation of end address based on number of pages (bsc#1012628). - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (bsc#1012628). - virt: sevguest: Add CONFIG_CRYPTO dependency (bsc#1012628). - blk-mq: fix potential io hang by wrong 'wake_batch' (bsc#1012628). - lockd: drop inappropriate svc_get() from locked_get() (bsc#1012628). - nvme-core: fix memory leak in dhchap_secret_store (bsc#1012628). - nvme-core: fix memory leak in dhchap_ctrl_secret (bsc#1012628). - nvme-core: add missing fault-injection cleanup (bsc#1012628). - nvme-core: fix dev_pm_qos memleak (bsc#1012628). - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (bsc#1012628). - md/raid10: fix overflow of md/safe_mode_delay (bsc#1012628). - md/raid10: fix wrong setting of max_corr_read_errors (bsc#1012628). - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (bsc#1012628). - md/raid10: fix io loss while replacement replace rdev (bsc#1012628). - md/raid1-10: factor out a helper to add bio to plug (bsc#1012628). - md/raid1-10: factor out a helper to submit normal write (bsc#1012628). - md/raid1-10: submit write io directly if bitmap is not enabled (bsc#1012628). - block: fix blktrace debugfs entries leakage (bsc#1012628). - irqchip/loongson-eiointc: Fix irq affinity setting during resume (bsc#1012628). - splice: don't call file_accessed in copy_splice_read (bsc#1012628). - irqchip/stm32-exti: Fix warning on initialized field overwritten (bsc#1012628). - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (bsc#1012628). - svcrdma: Prevent page release when nothing was received (bsc#1012628). - erofs: fix compact 4B support for 16k block size (bsc#1012628). - posix-timers: Prevent RT livelock in itimer_delete() (bsc#1012628). - tick/rcu: Fix bogus ratelimit condition (bsc#1012628). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (bsc#1012628). - btrfs: always read the entire extent_buffer (bsc#1012628). - btrfs: don't use btrfs_bio_ctrl for extent buffer reading (bsc#1012628). - btrfs: return bool from lock_extent_buffer_for_io (bsc#1012628). - btrfs: submit a writeback bio per extent_buffer (bsc#1012628). - btrfs: fix range_end calculation in extent_write_locked_range (bsc#1012628). - btrfs: don't fail writeback when allocating the compression context fails (bsc#1012628). - btrfs: only call __extent_writepage_io from extent_write_locked_range (bsc#1012628). - btrfs: don't treat zoned writeback as being from an async ... changelog too long, skipping 1321 lines ... - commit f6ca0bc ==== libshumate ==== Version update (1.0.4 -> 1.0.5) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update to version 1.0.5: + Don't defer frame clock when widget is unrealized. ==== libva ==== Version update (2.18.0 -> 2.19.0) Subpackages: libva-drm2 libva-wayland2 libva-x11-2 libva2 - Update to 2.19.0: * add: Add mono_chrome to VAEncSequenceParameterBufferAV1 * add: Enable support for license acquisition of multiple protected playbacks * fix: use secure_getenv instead of getenv * trace: Improve and add VA trace log for AV1 encode * trace: Unify va log message, replace va_TracePrint with va_TraceMsg. ==== libva-gl ==== Version update (2.18.0 -> 2.19.0) - Update to 2.19.0: * add: Add mono_chrome to VAEncSequenceParameterBufferAV1 * add: Enable support for license acquisition of multiple protected playbacks * fix: use secure_getenv instead of getenv * trace: Improve and add VA trace log for AV1 encode * trace: Unify va log message, replace va_TracePrint with va_TraceMsg. ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - CVE-2023-3750: storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' bsc#1213447 ==== netcontrol ==== - Fix EOF handling in xml-reader to avoid `virsh iface-*` commands hang on aarch64 (bsc#1213349) [+ 0001-xml-reader-fix-xml_getc-and-xml_ungetc.patch, + 0002-xml-reader-allow-uppercase-for-lt-gt-and-amp-expansi.patch] ==== nghttp2 ==== Version update (1.54.0 -> 1.55.1) - update to 1.55.1: * Fix memory leak This commit fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be sent, and nghttp2_on_stream_close_callback fails with a fatal error. For example, if GOAWAY frame has been received, a HEADERS frame that opens new stream cannot be sent. This issue has already been made public via CVE-2023-35945 by envoyproxy/envoy project. During embargo period, the patch to fix this bug was accidentally submitted to nghttp2/nghttp2 repository [2]. And they decided to disclose CVE early. I was notified just 1.5 hours before disclosure. I had no time to respond. PoC described in [1] is quite simple, but I think it is not enough to trigger this bug. While it is true that receiving GOAWAY prevents a client from opening new stream, and nghttp2 enters error handling branch, in order to cause the memory leak, nghttp2_session_close_stream function must return a fatal error. NGHTTP2_ERR_NOMEM, as its name suggests, indicates out of memory. It is unlikely that a process gets short of memory with this simple PoC scenario unless application does something memory heavy processing. * NGHTTP2_ERR_CALLBACK_FAILURE is returned from application defined callback function (nghttp2_on_stream_close_callback, in this case), which indicates something fatal happened inside a callback, and a connection must be closed immediately without any further action. As nghttp2_on_stream_close_error_callback documentation says, any error code other than 0 or NGHTTP2_ERR_CALLBACK_FAILURE is treated as fatal error code. More specifically, it is treated as if NGHTTP2_ERR_CALLBACK_FAILURE is returned. I guess that envoy returns NGHTTP2_ERR_CALLBACK_FAILURE or other error code which is translated into NGHTTP2_ERR_CALLBACK_FAILURE. https://github.com/envoyproxy/envoy/security/advisories/GHSA- jfxv-29pc-x22r ==== openssh ==== Version update (9.3p1 -> 9.3p2) Subpackages: openssh-clients openssh-common openssh-server - Update to openssh 9.3p2 (bsc#1213504, CVE-2023-38408): Security ======== Fix CVE-2023-38408 - a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if the following conditions are met: * Exploitation requires the presence of specific libraries on the victim system. * Remote exploitation requires that the agent was forwarded to an attacker-controlled system. Exploitation can also be prevented by starting ssh-agent(1) with an empty PKCS#11/FIDO allowlist (ssh-agent -P '') or by configuring an allowlist that contains only specific provider libraries. This vulnerability was discovered and demonstrated to be exploitable by the Qualys Security Advisory team. In addition to removing the main precondition for exploitation, this release removes the ability for remote ssh-agent(1) clients to load PKCS#11 modules by default (see below). Potentially-incompatible changes - ------------------------------- * ssh-agent(8): the agent will now refuse requests to load PKCS#11 modules issued by remote clients by default. A flag has been added to restore the previous behaviour "-Oallow-remote-pkcs11". Note that ssh-agent(8) depends on the SSH client to identify requests that are remote. The OpenSSH >=8.9 ssh(1) client does this, but forwarding access to an agent socket using other tools may circumvent this restriction. ==== openssh-askpass-gnome ==== Version update (9.3p1 -> 9.3p2) - Update to openssh 9.3p2 * No changes for askpass, see main package changelog for details ==== openssl-1_1 ==== Subpackages: libopenssl1_1 - Security fix: [bsc#1213487, CVE-2023-3446] * Fix DH_check() excessive time with over sized modulus. * The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch ==== openssl-3 ==== Subpackages: libopenssl3 libopenssl3-32bit - Security fix: [bsc#1213487, CVE-2023-3446] * Fix DH_check() excessive time with over sized modulus. * The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail. * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch - Security fix: [bsc#1213383, CVE-2023-2975] * AES-SIV implementation ignores empty associated data entries * Add openssl-CVE-2023-2975.patch ==== ovmf ==== Version update (202302 -> 202305) Subpackages: qemu-ovmf-x86_64 - Removed the following patches because they are not necessary and they blocked for submit to openSUSE:Factory. (bsc#1205978) ovmf-Revert-OvmfPkg-PlatformInitLib-Add-PlatformAddHobCB.patch ovmf-Revert-OvmfPkg-PlatformInitLib-Add-PlatformGetLowMem.patch ovmf-Revert-OvmfPkg-PlatformInitLib-Add-PlatformReservati.patch ovmf-Revert-OvmfPkg-PlatformInitLib-Add-PlatformScanE820-.patch ovmf-Revert-OvmfPkg-PlatformInitLib-reorder-PlatformQemuU.patch - Add openssl.keyring.README to shim.spec as Source113 to avoid erroe when submit to openSUSE:Factory - Enable support for riscv64 - Update to edk2-stable202305 (bsc#1205588) - Features (https://github.com/tianocore/edk2/releases): Expose IBT/BTI compatible runtime DXE drivers via memory attributes table Update toolchain support MdePkg: Support FDT library Add google mocks support to UnitTestFrameworkPkg GoogleTestLib Platform Redfish Host Interface library for USBNIC [OpenSSL] Update OpenSSL version to version 1.1.1t to include CVE fix Replace pre-standard FUNCTION with C99 func throughout edk2 Implement EFI memory attributes protocol for ARM platforms Add TraceHubLib Support - Patches (git log --oneline --date-order edk2-stable202302..edk2-stable202305): ba91d0292e MdeModulePkg/Core/Pei: set AprioriCount=0 before walking through next FV 5ce29ae84d ArmPkg/ArmMmuLib AARCH64: Add missing ISB after page table update c5cf7f69c9 pip-requirements.txt: Update edk2 pip modules 0abfb0be6c OvmfPkg: RiscVVirt: Add missing SerialPortInitialize to Sec 45da4e3135 MdePkg: add SBI-based SerialPortLib for RISC-V 2900e75511 MdePkg: BaseRiscVSbiLib: make more useful to consumers cafb4f3f36 UefiPayloadPkg: Fix boot shell issue for universal UEFI payload 80bc13db83 Maintainers.txt: Update reviewers and maintainers for FdtLib. d322557712 BaseTools/tools_def: Disable overzealous unused variable warning on Clang e2607d3a78 BaseTools/tools_def: Drop ref to undefined CLANGDWARF_ARM_PREFIX 0b37723186 ShellPkg/UefiShellDebug1CommandsLib: Replace hardcoded SMBIOS strings. 2d4c76f783 MdePkg/IndustryStandard: Add SMBIOS anchor string & length defines. c08a3a96fd MdePkg/IndustryStandard: Add IPMI Interface Capabilities definitions 083b029538 MdePkg: Add new PCDs for IPMI SSIF dea6c7dc2a MdePkg/IndustryStandard: Add definitions for IPMI SSIF 0a0e60caf2 Maintainers.txt: Update reviewers and maintainers for TraceHubDebugLib. 0f0422cedc MdeModulePkg: Add TraceHubDebugSysTLib library 3d50fdc5c6 MdePkg: Add NULL library of TraceHubDebugSysTLib c6bb7d54be MdePkg: Add MipiSysTLib library 782948c1a7 MdePkg: Add mipisyst submodule 6dd64168ed BaseTools/Plugin: Too many execute files cause "cmd too long" failure c6382ba0f2 SecurityPkg: Add missing break in Tpm2TestParms 77f75c7fb8 BaseTools: Update Tests/TestTools.py to allow it to work on Windows b9bbb4ae93 BaseTools: only print the environment once in toolsetup.bat dd246227d6 BaseTools: Update toolsetup.bat to not use BASETOOLS_PYTHON_SOURCE f47415e031 BaseTools: Revert Set the CLANGDWARF OBJCOPY path in tools_def.template 6fb2760dc8 OvmfPkg: drop PlatformBootManagerLibGrub 81dc0d8b4c OvmfPkg/AmdSev: stop using PlatformBootManagerLibGrub 63887e272d OvmfPkg/NvVarsFileLib: disable in case PcdBootRestrictToFirmware is set 41d7832db0 OvmfPkg/PlatformBootManagerLib: add PcdBootRestrictToFirmware e6447d2a08 Remove bashisms from edksetup.sh and BaseTools/BuildEnv 373a95532a BaseTools: Remove the CLANGCC build rule for Hii-Binary-Package.UEFI_HII ecbc394365 BaseTools: Set CLANGDWARF RC path to llvm-objcopy in tools_def.template 11f62f4cc0 BaseTools: Set the CLANGDWARF OBJCOPY path in tools_def.template c6f47e678f BaseTools: Remove BUILDRULEFAMILY from CLANGDWARF in tools_def.template 9165a7e95e CryptoPkg: Delete CLANG35 and CLANG38 build flags; add CLANGDWARF flags e97b9b4e5a MdePkg: Add more HobLib/PeiServicesLib gmock support 25c9d44315 MdeModulePkg: Add more PciHostBridgeLib gmock support bee67e0c14 OvmfPkg: Relax assertion that interrupts do not occur at TPL_HIGH_LEVEL ae0be176a8 OvmfPkg: Clarify invariants for NestedInterruptTplLib 5215cd5baf BaseTools: Update toolsetup.bat and Tests/PythonTest.py to check ver e6de6052a0 edksetup.bat: if toolsetup.bat fails, just exit 11ec5161fa BaseTools: use threading.current_thread in NmakeSubdirs.py db7e6291c0 BaseTools: Remove Python2/Python3 detection from toolset.bat 6eeb58ece3 RedfishPkg: Fix compile issue on Linux 665fca9ee7 RedfishPkg: Add missing newline character a1f6485a9b RedfishPkg: Create RestEx child on selected interface 05762bd2e0 RedfishPkg: Fix condition checking of error status c580e27efc RedfishPkg: Correct variable type to prevent memory corruption d89492456f Securitypkg/hddpassword: Update HddPasswordDxeInit to use Variable Policy 8dbf868e02 Add volatile keyword to NvmExpressPei's Passthru CQ 293b97d0c4 Add the volatile keyword to NvmExpressDxe's Passthru CQ 4dea9e4a0e BaseTools/Conf: Add quotes to ADDDEBUGFLAG in tools_def.txt 8e985ac3fd BaseTools/Conf: Align CLANGDWARF and CLANGPDB warning overrides 66494e5324 MdeModulePkg/CapsuleApp: Add EFIAPI to CompareFileNameInAlphabet() eabaeb0613 OvmfPkg: move OvmfTpmDxe.fdf.inc to Include/Fdf 8bca1bb977 OvmfPkg: move OvmfTpmPei.fdf.inc to Include/Fdf b65c0eed6b BaseSynchronizationLib: Fix LoongArch64 synchronization functions 757f502a3b BaseTools/Conf/tools_def.template: Bump VERSION to 3.00 050d6e9434 BaseTools: Delete CLANG38 from tools_def.template 128547b081 BaseTools: Remove CLANG35 toolchain from tools_def.template 4ef4b81c9b BaseTools: As with CLANGDWARF IA32 and X64, use lld for ARM and AARCH64 98edce75fa BaseTools: Add ARM and AARCH64 CLANGDWARF support in tools_def.template 0fc07b1c6a BaseTools/Conf/tools_def.template: Add section for deprecated toolchains 01225075db Add GCC and GCCNOLTO toolchains to tools_def.txt and update packages 66803cafcf BaseTools: Update VS toolchain descriptions in tools_def.txt.template d7c6030a47 BaseTools: Remove EBC (EFI Byte Code) compiler definitions 8b441847e3 BaseTools: Remove unused IPHONE_TOOLS and SOURCERY_CYGWIN_TOOLS defs ba634ce82b edksetup.bat: Remove VS2008-VS2013 remnants c844d86bee MdePkg: Remove VS2008-VS2013 remnants c3ac3301e9 BaseTools: Remove VS2008-VS2013 remnants 0363584ac9 BaseTools: Remove VS2008, 2010, 2012 and 2013 toolchain definitions 94c802e108 MdePkg/BasePeCoffLib: Deal with broken debug directories ff7cb2d7c9 .pytool: Support FDT library. 5d586606c7 MdePkg: Support FDT library. 10416bf46e Tianocore: Support FDT library. d992a05ade Maintainers.txt: Update for IntelFsp2Pkg and IntelFsp2WrapperPkg. ... changelog too long, skipping 312 lines ... issue be fixed. ==== php8 ==== Version update (8.2.7 -> 8.2.8) Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter - version update to 8.2.8 * This is a bug fix release. * https://www.php.net/ChangeLog-8.php#8.2.8 - modified patches % php-sort-filelist-phar.patch (refreshed) ==== python-rich ==== - %{?sle15_python_module_pythons} mut be at beginning to work. ==== qalculate ==== Version update (4.6.1 -> 4.7.0) Subpackages: libqalculate22 qalculate-data - version update to 4.7.0 * Support for custom default angle unit, e.g. turn, arcsec, arcmin * Append default angle unit (instead of always radians) when converting value without unit to angle unit * More consistent addition and removal of angle unit from function arguments * Always interpret ./, .*, and .^ as entrywise operators if user intention is unclear * Change order of operations to place entrywise and ordinary operators on the same precedence level * Add function, kron(), for Kronecker product, and constants for Pauli matrices * Add radius to planets dataset and update other properties * Support replacement of unknown variables within variable values * Fix besselj(0, 0) * Fix incomplete calculation in tan() with try exact approximation * Fix 0/0=0 equality (do not return true) and output of 2/0 (and similar) * Fixes and improvements for newtonsolve() and secantsolve() * Fix segfault when MathStructure is deleted after Calculator, and in destructor of calculated DynamicVariable (called from Calculator destructor) * Do not save mode on exit if "-defaults" command line switch where used (CLI) * Allow multiple actions for keyboard shortcuts (GTK, Qt) * Add toggle precision, and min, max, or min and max decimals to available shortcut and button actions (GTK, Qt) * Add option to exclude units for unformatted ASCII copy (GTK, Qt) * Add optional value to copy result action, allowing expression copy and formatting selection (GTK, Qt) * Fix copy unformatted ASCII when local digit group separator is same as selected decimal separator (GTK, Qt) * Add option to automatically copy result (Qt) * Always set (primary) selection clipboard contents when whole expression is selected or selection is cleared, e.g. after calculation (Qt) * Improve support dark mode and high contrast modes, and change default style to Fusion, on Windows (Qt) * Minor bug fixes and feature enhancements ==== sysuser-tools ==== - Add "quilt setup" friendly hint to %sysusers_requires usage It is not required to have sysuser-tools installed when working with a pkg source which uses sysuser-tools at build time. ==== tar ==== Subpackages: tar-lang tar-rmt - Update tests-skip-time01-on-32bit-time_t.patch to not run test on armv6 either ==== update-alternatives ==== Version update (1.21.8 -> 1.21.22) - openssl.patch: use openssl library for MD5 calculation instead of relying on libmd. libmd is not in Ring0 - require Perl 5.28.1 or later ==== virtualbox ==== Version update (7.0.8 -> 7.0.10) - VirtualBox 7.0.10 (released July 18 2023) This is a maintenance release. The following items were fixed and/or added: OCI: Introduced general improvements VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551) GUI: Added general improvements TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622) 3D: Initial support for OpenGL 4.1 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515) Guest Control/VBoxManage: Fixed parameter "--ignore-orphaned-processes" Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option "--arg0". This will effectively restore the behavior of former VirtualBox versions Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575) NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560) Linux Host: Added initial support for Indirect Branch Tracking (bug #21435) Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet) Linux Host and Guest: Improved condition check when kernel modules need to be signed Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed Linux Guest Additions: Added initial support for kernel 6.4 Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740) Linux Guest Additions: Introduced general improvements in the installer area Windows Guest Additions: Introduced general improvements in graphics drivers area removed "fixes_for_kernel_6.4.patch" as this is fixed upstream Fix issue with kernel on newer CPU (boo#1212209) ==== virtualbox-kmp ==== Version update (7.0.8_k6.4.3_1 -> 7.0.10_k6.4.4_1) - VirtualBox 7.0.10 (released July 18 2023) This is a maintenance release. The following items were fixed and/or added: OCI: Introduced general improvements VMM: Fixed a bug while walking page tables while executing nested VMs causing flooding of the release log as a consequence (Intel hosts only, bug #21551) GUI: Added general improvements TPM: Fixed a crash when a VM has a TPM version 1.2 configured (bug #21622) 3D: Initial support for OpenGL 4.1 3D: Fixed various graphics issues with Windows 11 guests (bugs #21136, #21515) Guest Control/VBoxManage: Fixed parameter "--ignore-orphaned-processes" Guest Control/VBoxManage: Fixed behavior of how handling argument 0 for a started guest process works: One can now explicitly specify it with the newly added option "--arg0". This will effectively restore the behavior of former VirtualBox versions Audio: Also use the PulseAudio backend when pipewire-pulse is running instead of falling back to ALSA (bug #21575) NAT: Adjusted UDP proxy timeout from 18-21 to 21-24 range to respect intended 20 second timeout (bug #21560) Linux Host: Added initial support for Indirect Branch Tracking (bug #21435) Linux Host: Added initial support for kernel 6.5 (NOTE: Guest Additions do not support kernel 6.5 yet) Linux Host and Guest: Improved condition check when kernel modules need to be signed Linux Host and Guest: Added initial support for RHEL 8.8 (bug #21692), 8.9 (bug #21690) and 9.3 (bugs #21598 and #21671) kernels Linux Guest Additions: Fixed issue when kernel modules were rebuilt on each boot when guest system has no X11 installed Linux Guest Additions: Added initial support for kernel 6.4 Linux Guest Additions: Fixed issue when vboxvideo module reloading caused kernel panic in some guests (bug #21740) Linux Guest Additions: Introduced general improvements in the installer area Windows Guest Additions: Introduced general improvements in graphics drivers area removed "fixes_for_kernel_6.4.patch" as this is fixed upstream Fix issue with kernel on newer CPU (boo#1212209) ==== webkit2gtk3 ==== Version update (2.40.3 -> 2.40.4) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.40.4: + Fix a bug in JavaScript reading variable arguments in a call. ==== webkit2gtk3-soup2 ==== Version update (2.40.3 -> 2.40.4) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.40.4: + Fix a bug in JavaScript reading variable arguments in a call.

1 0

New package submission for Factory: xdp-tools
by Shung-Hsi Yu 25 Jul '23

25 Jul '23

Hi, I'd like to submit a new package from network to Factory. The package is xdp-tools, which consists of utilities, helper library, and example programs for use with eXpress Data Path (XDP). XDP is a high performance and user-programmable network data path in the Linux kernel, supported since Linux Kernel v4.8. It allows bypassing the kernel's networking stack for performance, but still preserve the possibility of failing back to the network stack if needed; while the user-programmable part are done with eBPF programs. xdp-tools packaged itself provides a few utilities that are powered by XDP under the hood: - xdpdump: a tcpdump-like tool that captures packet - xdp-filter: packet filtering utility with drop rates up to tens of millions of packets per second per core - xdp-trafficgen: network traffic generator that can generate millions of packets per second per core - xdp-loader: simple loader for XDP program with support for attaching multiple XDP program to the same interface - xdp-monitor: monitors and display various XDP related statistics and events - xdp-bench: XDP benchmarking tool It also comes with a helper library libxdp that does the heavy lifting and libxdp-devel that provides the programming interface for those who needs finer control. This is a bit of a late addition. When libbpf (which is in Factory) remove its support for AF_XDP in 2021, the features are moved in libxdp[1]; so in an ideal world xdp-tools should have already been added back then. But better later then never :) Shung-Hsi 1: https://github.com/libbpf/libbpf/wiki/Libbpf:-the-road-to-v1.0#xskch-is-mov…

3 3

New Tumbleweed snapshot 20230719 released!
by Dominique Leuenberger 25 Jul '23

25 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 7zip cheese (44.0.1 -> 44.1) dracut (059+suse.447.g9d1fc722 -> 059+suse.476.g5e324584) exiv2 kmod libX11 (1.8.5 -> 1.8.6) libstorage-ng (4.5.123 -> 4.5.127) libwebp (1.3.0 -> 1.3.1) libyajl openexr pipewire (0.3.72 -> 0.3.74) qemu (8.0.2 -> 8.0.3) setools systemd (253.5 -> 253.7) systemd-presets-branding-openSUSE taglib (1.13 -> 1.13.1) xkeyboard-config (2.38 -> 2.39) yast2-trans (84.87.20230708.d1de37aed1 -> 84.87.20230714.966688ddd0) === Details === ==== 7zip ==== - Enable ARM64 ASM introduced in 23.01 ==== cheese ==== Version update (44.0.1 -> 44.1) Subpackages: cheese-lang libcheese-common libcheese-gtk25 libcheese8 typelib-1_0-Cheese-3_0 - Update to version 44.1: + Update AppStream metadata. + Updated translations. ==== dracut ==== Version update (059+suse.447.g9d1fc722 -> 059+suse.476.g5e324584) - Update to version 059+suse.476.g5e324584: This is the 2nd backport of the most important fixes and features from the upstream master branch, while the release date of version 060 is still undefined. Features: * feat(network-wicked): remove module * feat(systemd-rfkill): remove module * feat(livenet): add memory size check depending on live image size * feat(nvmf): add code for parsing the NBFT Fixes: * fix(systemd-sysext): handle confexts and correct extensions search path * fix(modsign): load keys to correct keyring * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known * fix(fs-lib): remove quoting form the first argument of the e2fsck call * fix(Makefile): remove leftover rpm build rules * fix(Makefile): no longer upload to kernel.org * fix(nvmf): support /etc/nvme/config.json * fix(nvmf): install 8021q module unconditionally * fix(install.d): respect even more kernel-install vars, plus style fixes * fix(install.d): respect more kernel-install env variables * fix(dracut.sh): also prevent fsfreeze for tmpfs * fix(dmsquash-live): allow other fstypes * fix(bluetooth): make bluetooth rules more strict * fix(bluetooth): add missing files * fix(bluetooth): include it if Appearance matches the value assigned for keyboard * fix(btrfs): do not require module via cmdline when --no-kernel * fix(btrfs): add missing cmdline function Other: * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints * refactor(virtiofs): remove exit after die * build: remove rpm spec file and build rules * docs: remove rd.lvm.snapsize and rd.lvm.snapshot * chore(gentoo.conf): remove examples to avoid confusion * chore: remove git2spec.pl, it is no longer used ==== exiv2 ==== - add exiv2-metadata-null-checks.patch fixes gwenview crashes and other apps https://github.com/Exiv2/exiv2/issues/2638 ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Edit usr-lib-modules.patch to /lib/modules provide fallback behavior for successfully running `make modules_install` in pristine tarballs. ==== libX11 ==== Version update (1.8.5 -> 1.8.6) Subpackages: libX11-6 libX11-data libX11-xcb1 - update to 1.8.6: * InitExt.c: Add bounds checks for extension request, event, & error codes * Fixes CVE-2023-3138: X servers could return values from XQueryExtension that would cause Xlib to write entries out-of-bounds of the arrays to store them, though this would only overwrite other parts of the Display struct, not outside the bounds allocated for that structure. - drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream) ==== libstorage-ng ==== Version update (4.5.123 -> 4.5.127) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#941 - added get_version_string function - 4.5.127 - merge gh#openSUSE/libstorage-ng#940 - wait for block device before using blkdiscard - 4.5.126 - merge gh#openSUSE/libstorage-ng#939 - wait for block device before using wipefs (bsc#1213420) - coding style - 4.5.125 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.124 ==== libwebp ==== Version update (1.3.0 -> 1.3.1) Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3 - Update to version 1.3.1: * security fixes for lossless encoder (CVE-2023-1999) * improve error reporting through WebPPicture error codes * fix upsampling for RGB565 and RGBA4444 in NEON builds * img2webp: add -sharp_yuv & -near_lossless * fix webp_js with emcc >= 3.1.27 (stack size change) * CMake fixes * further updates to the container and lossless bitstream docs - Drop libwebp-double-free.patch: fixed upstream. ==== libyajl ==== - add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928) ==== openexr ==== Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30 - Add patch to fix regression on non-SSE architectures https://github.com/AcademySoftwareFoundation/openexr/issues/1460: * 1488.patch - Also disable 'DWA[AB]Compression' test on aarch64 as the patch above fixes the issue for all targets, except aarch64 ==== pipewire ==== Version update (0.3.72 -> 0.3.74) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.74: * Highlights - Fix a critical bug where audio to bluetooth devices would cut out randomly. - Improve RAOP compatibility. - Avoid crashes after an update. - Small fixes and improvements. * PipeWire - Mix info on port is now created explicitly. - Remove the node as a driver peer when stopping. This caused some problem with playback on and other remote bluetooth devices. - Work on avoiding crashes when loading new modules that use internal API with old libpipewire. This is typical after an update where the old library is still loaded by an application but when a new stream is created, updated modules are loaded. * Modules - The RTP source module now has an option to ignore the SSRC, which is useful to continue to receive the stream when the sender is restarted. - The native protocol will refuse to load twice now instead of silently ignoring the error. - module-raop is compatible with more devices. * SPA - plugins will now warn when running out of buffers. This is always a bad thing. - Merge scope based cleanup macros. - Add ratelimit function. - Update to version 0.3.73: * Highlights - Fixes an ALSA resume after suspend error. - Handle and disable seemingly wrong hires timestamps from ALSA. - Filter-chain now has loadable plugin modules. The LV2 and sofa plugins are moved to a separate .so file to make things more modular. - Rate changes in the graph should now be handled more gracefully by loopback and filter-chain. - A regression in the rtp-sap module was fixed where it would in some cases fail to start. - A potential crash in the peaks resampler was fixed. - Many cleanups and other small bug fixes. * PipeWire - Fix a potential segfault when no fallback driver was set in the config. - Improve OPUS detection. - Add ASYNC flag to pw-filter and pw-stream when queue/dequeue is not called from the process function. This ensure we allocate an extra buffer. - Discard pending process callbacks when disconnecting. - Cleanups and improvements to the debug environment variable parsing. - The graph rate was tweaked to better handle very low rates Â such as those requested by pavucontrol when it does the signal monitoring. * Modules - An example filter module was added. - Filter-chain and loopback now disable the resamplers if no rate is specified and will always follow the graph rate. - Improve setup of filter-chain. The graph is now created when starting because this ensure the target graph rate is known. - Filter-chain can now link notify ports to control ports in the graph. - Filter-chain now has loadable plugin modules. The LV2 and sofa plugins are moved to a separate .so file. - A regression in the rtp-sap module was fixed where it would in some cases fail to start. - Module-rt now has options to disable rlimits, portal and rtkit. - module-raop-discover now has an options to set the latency. * Tools - pw-cat now supports overriding all stream properties. * SPA - Disable rate negotiation when the resampler is disabled. We will always follow the graph rate. - Set device.icon property for UCM ports as well. - Improve ALSA recover when using hires timestamps. This fixes some problems after resume from suspend. - ALSA will now warn and disable hires timestamp when they seem wrong. They can also be disabled manually with a property. - V4l2 will now gracefully handle ENOTTY when enumerating frame sizes and frame rates. - A potential crash in the peaks resampler was fixed. * pulse-server - A client crash in pavucontrol is avoided by always setting a card name. - The graph rate is now taken correctly when using the FIX flags. - An option was added to ignore the FIX flags of a stream. Also the documentation for those options was updated. - module-raop-discover now support latency_msec. * Bluetooth - Remove an assert and issue a warning/recover instead when a buffer is too small. * GStreamer - The device provider does locking when destroying the registry. ==== qemu ==== Version update (8.0.2 -> 8.0.3) Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-img qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-pr-helper qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Update to version 8.0.3: * See full log: https://lists.nongnu.org/archive/html/qemu-stable/2023-07/msg00086.html * Security issues fixed: - 9pfs: prevent opening special files (CVE-2023-2861) - vhost-vdpa (CVE-2023-3301) * Use the official xkb name for Arabic layout, not the legacy synonym (bsc#1212966) * [openSUSE][RPM] Update to version 8.0.3 ==== setools ==== Subpackages: python311-setools setools-console - Add python3-setuptools as a runtime requirement of python3-setools (boo#1213305) ==== systemd ==== Version update (253.5 -> 253.7) Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Import commit 2dac0aff9ced1eca0cd11c24e264b33095ee5a5e (merge of v253.7) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/6458c066547eaadf0e9709e441ea36a… - Import commit 6458c066547eaadf0e9709e441ea36ad03faa860 (merge of v253.6) For a complete list of changes, visit: https://github.com/openSUSE/systemd/compare/07bb12a282b0ea378850934c4a76008… - Drop 5002-Revert-core-service-when-resetting-PID-also-reset-kn.patch, it's been backported to v253.6. - Move a bunch of files from systemd to udev. These are pretty useless without block devices. ==== systemd-presets-branding-openSUSE ==== - enable the various libvirt modular daemons (boo#1212195) ==== taglib ==== Version update (1.13 -> 1.13.1) Subpackages: libtag1 libtag_c0 - Update to version 1.13.1: * Fixed parsing of TXXX frames without description. * Detect MP4 atoms with invalid length or type. * Do not miss ID3v2 frames when an extended header is present. * Use property "DISCSUBTITLE" for ID3v2 "TSST" frame. * Build system improvements: Use absolute path for macOS dylib install name, support --define-prefix when using pkg-config, fixed minimum required CppUnit version. * Code clean up using clang-tidy. ==== xkeyboard-config ==== Version update (2.38 -> 2.39) Subpackages: xkeyboard-config-lang - Update to version 2.39 * another bugfix release; also needed for changes for the Amharic (am_ET.UTF-8) compose key sequences in libX11 1.8.5 (see corresponding changelog entry in libX11 package); removes old remappings like ar --> ara (git db45bd75, 470ad2cd) [breaks current qemu build] ==== yast2-trans ==== Version update (84.87.20230708.d1de37aed1 -> 84.87.20230714.966688ddd0) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230714.966688ddd0: * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian) * Translated using Weblate (Indonesian)

1 0

kernel 6.4.x and power management on kaby lake
by Michal Hlavac 24 Jul '23

24 Jul '23

Hi, I have Dell xps 9560 with kaby lake CPU. After upgrading to kernel 6.4.x suspend to ram does not work when power suply is disconnected. when I disconnect power suply I get errors: [Ne júl 23 11:35:28 2023] ata2: SATA link down (SStatus 4 SControl 300) [Ne júl 23 11:35:30 2023] pci 0000:01:00.0: not ready 1023ms after resume; waiting [Ne júl 23 11:35:31 2023] pci 0000:01:00.0: not ready 2047ms after resume; waiting [Ne júl 23 11:35:33 2023] pci 0000:01:00.0: not ready 4095ms after resume; waiting [Ne júl 23 11:35:38 2023] pci 0000:01:00.0: not ready 8191ms after resume; waiting [Ne júl 23 11:35:46 2023] pci 0000:01:00.0: not ready 16383ms after resume; waiting [Ne júl 23 11:36:03 2023] pci 0000:01:00.0: not ready 32767ms after resume; waiting [Ne júl 23 11:36:38 2023] pci 0000:01:00.0: not ready 65535ms after resume; giving up [Ne júl 23 11:36:38 2023] pci 0000:01:00.0: Unable to change power state from D3cold to D0, device inaccessible [Ne júl 23 11:36:38 2023] pci 0000:01:00.0: Unable to change power state from D3cold to D0, device inaccessible lspci 01:00.0 3D controller: NVIDIA Corporation GP107M [GeForce GTX 1050 Mobile] (rev a1) Do I have to create kernel bug or do you have any hints what can I do. thanks, miso

2 2

New package: kubo
by Bernhard M. Wiedemann 24 Jul '23

24 Jul '23

Hi fellow Geekos, I'm submitting kubo (formerly go-ipfs) to Factory: https://build.opensuse.org/request/show/1099919 This allows to access the InterPlanetary FileSystem (IPFS) either as fixed immuntable content like /ipfs/bafybeigjlurskpf5c5rguw5ywynx4pzzhehjipw7stgvl2gqi4ykxrfdji or via dynamic references to the above, e.g. as ipfs ls /ipns/opensuse.zq1.de/ also available as FUSE mount via ipfs mount https://github.com/ipfs/kubo/blob/master/docs/fuse.md Below the surface it uses a DHT to locate chunks identified by their hash and like bittorrent it re-shares downloaded chunks, which can help distributing files to a large userbase. Ciao Bernhard M.

3 2

Kernel 6.4.3 comes with lockdown enabled
by Frank Krüger 23 Jul '23

23 Jul '23

JFYI: Kernel 6.4.3-3.g5ab030f-default from Kernel:stable has lockdown enabled (i.e. "cat /sys/kernel/security/lockdown -> integrity"), which was announced some time ago. Since hibernation is not working in this case with secure boot enabled, is there any solution in sight? Thx. Regards, Frank

3 5

Tumbleweed - Review of the week 2023/29
by Dominique Leuenberger 21 Jul '23

21 Jul '23

Dear Tumbleweed users and hackers, This week is all in the spirit of some data center moves. OBS had been announced to have fewer worker powers and openQA is also in read-only mode, busy moving to a new home. This of course has some effect on the number of Tumbleweed snapshots: we won’t be publishing snapshots that cannot go through openQA. For this reason, we have only published 4 snapshots this week (0714, 0716, 0717, and 0718). The most relevant changes contained in these snapshots are: * Mozilla Firefox 1150.2 * audit 3.1.1 * Linux kernel 6.4.3 (with full lockdown enabled) * Libvirt 9.5.0 * Freetype2 2.13.1 * krb5 1.21.1 * Poppler 23.07.0 Staging projects started getting crowded – mostly due to openQA being down and no tests being executed at the moment. The list of staged changes includes: * systemd 253.7 * Rust 1.71 * Meson 1.2.0: enabled Python cache builds by default, resulting in a bunch of files section not matching anymore * Linux kernel 6.4.4 * PHP 8.2.8 * Samba 4.18.5 * GCC 13.2 Cheers, Dominique

2 1

Leap 15.6 and SLES 15 SP6 Early Feature submit deadline is tomorrow
by Lubos Kocman 21 Jul '23

21 Jul '23

Hello openSUSE! I'd like to ask you to report any feature or update requests against SLES packages-part of openSUSE Leap in https://code.opensuse.org/leap/features/issues until end of business tomorrow. I'll review them before end of the day, and will review them and turn them into jiras. You can of course create them after the deadline too, however, they could be potentially treated as late features, which adds extra approval chain. I have seen only few cases when a sane request was rejected, and that was mostly due to ABI breakage concerns. Planning for the change ahead gives you the best chance to get it in. Good example with a short reasoning is for example https://code.opensuse.org/leap/features/issue/116 Thank you very much in advance Best regards Lubos Kocman openSUSE Leap Release Manager

2 1

Security update missing for ghostscript CVE-2023-36664
by Christian K 21 Jul '23

21 Jul '23

Hi, I am sure most of you have recently learned about critical security issues in ghostscript. I am surprised to not find any OpenSUSE updates addressing this issue, nor any announcements on the openSUSE Security Announce mailing list. Am I missing something, or is CVE-2023-36664 currently unaddressed? Best regards Christian

5 5

Something broke in osc and obs since last night.
by Larry Len Rainey 21 Jul '23

21 Jul '23

2 2

Feedback
by Leandro Almeida 20 Jul '23

20 Jul '23

Hello, leaving feedback. 1 - In the settings, in the performance tab in the Chromium browser, the battery saving option at 20% 50% etc, is not available. I use the chromium that opensuse makes available in discover. 2 - In firefox, after adding gpu acceleration for intel, it improved 4k. Videos at 4k60fps have few crashes, usually in areas with a lot of information on the screen. But with playback speed at 2x, it freezes a lot. Videos at 8k60fps also freeze at normal speed. 3 - If any video in 240p or 4k60fps is open, and pressing and holding the volume button, it freezes in the path, the video also freezes. Also, if it is at maximum or zero, hold the volume up or down button for a while. 4 - I left it enabled in the settings, the option for the volume to reach 150%, here the audio is very low, usually it has to be above 100%, at 112% on average, to compensate. 5 - The touchpad disable button is not being recognized in the operating system. In the keyboard settings, the 105-key keyboard is selected. 6 - In games on steam, it has fps losses, when compared to windows 11. In general, it is an average of 4 to 6 fps, and there are games where the difference is 30 fps. Steam play, experimental proton, background enabled vulkan shaders. I use steam that opensuse makes available on discover. Also wanted to suggest, to alleviate the use of system resources on the pc. Also increase the laptop's battery duration, to reach 10 hours if possible. Lower the overall temperature of the pc a little. Also improve the auto adjustment of the system in the image area, to be 100% srgb. Also an improvement in hardware acceleration, audio, video, gpu etc. and sound/audio with balanced equalization, with higher quality, reaching 384000hz automatically, if the device supports it 👍😄 I use a base cooler from c3tech, nbc 50v2, usb 5v, with 2 coolers. Thermal paste and pc maintenance up to date. The pc does not have a cooler, it came from the factory that way. Opensuse tumbleweed, Kde plasma with wayland Btrfs Thanks in advance, 👍😄

6 6

Build of kernel with `make binrpm-pkg` fails
by Mark Rubin 20 Jul '23

20 Jul '23

(Yes, I seem to be spamming this list. If it's any excuse, please know that I spend 24/48/more hours trying to solve each problem on my own before asking for help here.) I'm trying to build the current openSUSE kernel. This isn't something I want to be spending time on, but for the reasons why, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… I've done the following: ``` $ git clone https://github.com/openSUSE/kernel $ cp -p /boot/config-6.3.9-1.g0df701d-default .config $ make olddefconfig $ make menuconfig ``` The last ("menuconfig") is required to make some changes to fix: ``` make[2]: *** No rule to make target '.kernel_signing_key.pem', needed by 'certs/signing_key.x509'. Stop. make[2]: *** Waiting for unfinished jobs.... CERT certs/x509_certificate_list make[1]: *** [scripts/Makefile.build:495: certs] Error 2 make[1]: *** Waiting for unfinished jobs.... ... make: *** [Makefile:2041: .] Error 2 ``` Finding the magic settings to fix that wasn't easy, but no matter. Continuing: ``` $ make binrpm-pkg ... depmod: ERROR: could not open directory /usr/local/home/mark/rpmbuild/BUILDROOT/kernel-6.4.0_rc7_1.g0df701d_default+-1.x86_64/usr/lib/modules/99.98.6.4.0-rc7-1.g0df701d-default+: No such file or directory depmod: FATAL: could not search modules: No such file or directory make[2]: *** [Makefile:1971: modules_install] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.UXaZfI (%install) ... RPM build errors: Bad exit status from /var/tmp/rpm-tmp.UXaZfI (%install) make[1]: *** [scripts/Makefile.package:91: binrpm-pkg] Error 1 make: *** [Makefile:1672: binrpm-pkg] Error 2 ``` Much investigation reveals that `rpmbuild`, invoked from "scripts/Makefile.package" via the "binrpm-pkg" target ... ``` binrpm-pkg: $(MAKE) -f $(srctree)/Makefile $(CONFIG_SHELL) $(MKSPEC) prebuilt > $(objtree)/binkernel.spec +rpmbuild $(RPMOPTS) --define "_builddir $(objtree)" --target \ $(UTS_MACHINE)-linux -bb $(objtree)/binkernel.spec ``` ... is creating a "/var/tmp/rpm-tmp.<some-tempname-hash>" file which is later executed. That script creates many directories, but not the missing one in the error message above. I've tried to hack in some workarounds, but all fail. It doesn't do any good to edit the /var/tmp/rmp-tmp.<hash> file because a new one is created on the next run of `make binrpm-pkg`. Likewise, creating the missing directory doesn't help because the script first cleans up the previous run with `rm -rf /usr/local/home/mark/rpmbuild/BUILDROOT/..." before recreating that whole directory tree, and that wipes out the hack-in subdirectory. So ... the questions (for anyone who has experience building kernels and would be willing to offer help): - Is there any reason why the "binrpm" target doesn't work or shouldn't be used? It seems (and is documented online) to be a better alternative to `make install` because it can't break the running system (it can be done as a non-root user and the resulting RPM later installed). - Is this a bug either in `rpmbuild` or the makefile's invocation of it? - Is doing `make rpm-pkg` (which is advertised to make two RPMs, one binary and one source) necessary instead? I've tried, and it errors with yet more problems which I'm trying to address, but predict that once it makes the source RPM it will break on the binary (the only thing I really want) with the same failure I'm already seeing. - Is doing `make module_install` followed by `make install` what everyone uses, and I'm going down some untested and unsupported path? As always, thanks for any advice or suggestions (including, I suppose, "If you don't know how to build the kernel you shouldn't be doing it.")

6 7

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 20 Jul '23

20 Jul '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - aubio: Fails to build - deepin-api: Fails to build - epymc: Fails to build - ibus-typing-booster: Fails to build - libopenraw: Fails to build - mozjs78: Fails to build - python-Flask-BabelEx: Fails to build - python-Mathics: Fails to build - python-Nuitka: Fails to build - python-barbicanclient: Fails to build - python-castellan: Fails to build - python-cinderclient: Fails to build - python-cirq: Fails to build - python-designateclient: Fails to build - python-freezerclient: Fails to build - python-glanceclient: Fails to build - python-gns3fy: Fails to build - python-gvm-tools: Fails to build - python-heatclient: Fails to build - python-ironic-inspector-client: Fails to build - python-ironicclient: Fails to build - python-keystoneauth1: Fails to build - python-keystoneclient: Fails to build - python-keystonemiddleware: Fails to build - python-magnumclient: Fails to build - python-manilaclient: Fails to build - python-masakariclient: Fails to build - python-mistralclient: Fails to build - python-monascaclient: Fails to build - python-neutronclient: Fails to build - python-octaviaclient: Fails to build - python-osc-lib: Fails to build - python-pscript: Fails to build - python-pycsw: Fails to build - python-qsymm: Fails to build - python-saharaclient: Fails to build - python-senlinclient: Fails to build - python-snimpy: Fails to build - python-sortinghat: Fails to build - python-swiftclient: Fails to build - python-swifter: Fails to build - python-wsgi_intercept: Fails to build - seamonkey: Fails to build - vala-panel-appmenu: Fails to build - zathura-plugin-pdf-mupdf: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 2

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 19 Jul '23

19 Jul '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - gcc12: Uninstallable: FOLLOWUP(libstdc++6-gcc12) Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

New Tumbleweed snapshot 20230718 released!
by Dominique Leuenberger 19 Jul '23

19 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: mlterm mosh pentobi (23.0 -> 23.1) zlib-ng-compat (2.1.2 -> 2.1.3) === Details === ==== mlterm ==== Subpackages: mlterm-common mlterm-fcitx mlterm-sdl2 - Disable wayland backend on 15.4 - fails to build. ==== mosh ==== - Fix building with protobuf 23.3: this version of protobuf doesn't support C++11 anymore. A workaround has to be used at build time, see GitHub https://github.com/mobile-shell/mosh/issues/1278 ==== pentobi ==== Version update (23.0 -> 23.1) - update to 23.1: * Overwriting game file on Android with shorter file created corrupted file. ==== zlib-ng-compat ==== Version update (2.1.2 -> 2.1.3) - update to 2.1.3: * Fix endless loop bug in chunkcopy_safe. #1526 * Support using distro-supplied Gtest #1519 * Minor code cleanup of deflate.c #1500 * Improve buildsystem detection of ARM Cortex #1521 * Cross-compiling and little-endian fixes #1518 #1520 * Optimize compare256 using RVV #1498 * Optimize slide_hash using RVV #1522 - drop 1526.patch (upstream)

1 0

It is recommended to use fcitx5 to replace fcitx4
by Poplar.at.twilight 19 Jul '23

19 Jul '23

Hi, I am Poplar. I recommend replacing the fcitx package of the openSUSE ISO file with fcitx5. The development of fcitx(fcitx4) has been discontinued. Replacing the old fcitx version allows new openSUSE users to experience the latest generation of fcitx input method and various improvements immediately after installing the system. Poplar.at.twilight, 2023-07-19.

4 3

About libreoffice's openJDK dependency version
by Poplar.at.twilight 19 Jul '23

19 Jul '23

Hi, I found that libreoffice requires java-11-openjdk. When I was about to uninstall this version, zypper reminded me that the uninstalled package will contain libreoffice-base. I wonder is there any particular reason why libreoffice uses java-11-openjdk? According to https://endoflife.date/java , openJDK 11 ended active support. Is it time to switch dependencies to openJDK 17? Poplar.at.twilight, 2023-07-19

6 12

openSUSE Release Engineering meeting 19.07.2023
by Lubos Kocman 19 Jul '23

19 Jul '23

All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting The meeting is hosted here https://meet.opensuse.org/ReleaseEngineeringMeeting ## Attendees bittin,wengel,guillaumeg,dirk, anag, lkocman, ddemaio,maxlin ## Leap Back from vacation. Excited about https://grommunio.com/blog/grommunio-packages-in-opensuse-factory/ First feature requests against 15.6 were processed. https://code.opensuse.org/leap/features For everyone: please request SLES 15 SP6 update/change features as soon as possible via the link above, to ensure your request is treated as an early feature. Details on https://en.opensuse.org/openSUSE:Roadmap#DRAFT_Schedule_for_openSUSE_Leap_1… The setup of openSUSE:Backports:SLE-15-SP6 and openSUSE:Leap:15.6 is done. Everybody is welcome to help me with creating action items, or even better take action items https://en.opensuse.org/Portal:15.5/Retrospective Leap Micro https://bugzilla.suse.com/show_bug.cgi?id=1213428 ## openSUSE Tumbleweed openSUSE:Factory build fail stats: 90 failed 1 unresolvable (last week: 121 failed, 3 unresolvable) https://tinyurl.com/ysy4nnnz * kernel 6.4.3 now available (with lockdown) * libxml2 2.11.x blocked, as it breaks things like perl-XML-LibXML, * fmt 10 blocked, as it breaks mariadb boo#1213219, ceph boo#1213217 * Maybe no snapshots next 2-3 days because openQA migration. ## Richard (Aeon) Richard N/A ## Richard (ALP Architecture) Richard N/A ALP-based-Leap-replacement kickoff meeting happened and was recorded https://youtu.be/hLWvC1c7Fms https://etherpad.opensuse.org/p/weeklymeeting20230627 (some Q&A were captured there) Key points - There will be a Leap 15.6 - There will be a SUSE ALP "Micro" (name to change) coming 2024 - There will be a SUSE ALP "SLES Successor" (name to be defined) coming 2025 - There will be 1:1 copies of the above contributed by SUSE into openSUSE - Therefore some community needs (especially for enterprise server OSs) will likely be well handled automatically, but Leap had much broader use cases. The door is wide open for the community to address that and there is no critical rush - LOTS of open questions as to HOW the community may wish to address that - Probably one of the biggest issues is needing a lot more direct-to- the-codebase contributors, particually packagers and maintainers Please join the Matrix channel and get involved discussing the possible solutions ## Max * The openSUSE:Backports:SLE-15-SP6 setup is complete, staging project is running. package build has been disabled for now due to the AC issue in server room, per Wolfgang package build will be re-enabled later today or tomorrow. * openSUSE:Leap:15.6 setup is now done including the sibling subprojects * Branched the source packages from previous version * I'm now preparing to enable various checkers for Leap 15.6 and SLE15- SP6 Backports * Thanks to Marco, Rudi, Wolfgang and Adrian for helping the setup process ## Guillaume - Arm Tumbleweed: * Rolling * Latest snapshot (including kernel 6.4) has been tested on Lenovo X13s but it seems we are missing some Kconfig enablement (To be investigated) * shim currently not signed by Microsoft for aarch64 (Tumbleweed only, Leap is fine). It has been sent upstream for review, so it is progressing - https://bugzilla.suse.com/show_bug.cgi?id=1211297 * armv6: python-setuptools-rust package fails to build for armv6 (hangs in %check) and prevents lots of armv6 packages/images to build as it prevents python-cryptography to build. https://bugzilla.opensuse.org/show_bug.cgi?id=1213005 Leap: * 15.5: port for armv7: containers are currently not building/created. Dirk mentioned that driver in 15.4 was the k3s team. ALP: * shim not signed by MS (at least for aarch64, not sure for x86_64) - jsc#ARM-100 WSL: * Works with x86 emulator since appx installer is x86-64, but this is not really an issue since arm64 Win11 includes x86 emulator by default. Team is ok to publish it on Microsoft store anyway, but this would require some testing in openQA which is currently not possible (due to technical issues and MS licensing issues) https://progress.opensuse.org/issues/126083. Steps documented on the wiki to install the appx from download.o.o: https://en.opensuse.org/openSUSE:WSL#With_Appx_from_openSUSE_download_server ## Sarah - s390x Not available Tumbleweed * running * small test issue related to system profile in the installation Leap: * working * waitingSubmissisions with fixes for gtkd and gnu-cobol: https://build.opensuse.org/request/show/1072852 (waiting for a simple Submit Approval of a Requires since 4 months!) -> Alternative submitting directly to zSystems if Maintainers do not respond -> Resolving https://bugzilla.opensuse.org/show_bug.cgi?id=1209438 https://build.opensuse.org/request/show/1078385 * Sarah is organizing access to IBM Z Security Portal regarding security fixes (Spectre v2and other things) -> waiting * SUSE/openSUSE zSystems meeting has happened * The bi-weeky openSUSE zSystems meeting will switch from 18:00 to 19:00. ## Doug * Sponsorship of LinuxFest NorthWest from previous pre-covid sponsorship carries forward this year * Contact ddemaio if plan to attend or want to run a booth * https://linuxfestnorthwest.org/ * openSUSE Conference 2023 videos complete * Thank you c3voc & openSUSE Video Team * Scheduling video posts on social media * Project Clarity * Establishing a clear understanding of projects within the openSUSE Project umbrella and how new project will be identified, verified to be part of the openSUSE Project * Board will be taking this on (Rancher and Uyuni/SUSE Manager) was discussed in the board meeting earlier this week) * openSUSE.Asia Summit * Registrations 4, Submissions 5 * Talks can be onsite or virtual (recorded). * Deadline is August 20. * Submit your proposal at https://events.opensuse.org/ * openALT / Fall 2023 (invoice based) sponsorship approved by Anicka (10k CZK) - Dirk reminded us about OSCC still having some budget available * Trying to troubleshoot one TSP payments * Community meeting * Worked on project clarity & enhancing info on https://en.opensuse.org/openSUSE:How_to_contribute_to_Factory * EL Collaboration Meeting changed to once a month. Next is August 31 * GSoC * Mid-term evaluations complete with 100% Friday, July 14, by 18:00 UTC * openSUSE Boxes * Two companies are thinking about restarting with Start-Up Booklet * Stakeholders informed * Need to schedule followup meeting w/netitwork Static * Still need future storage location * AI topics (static) * Scraping of info & how it might affect costs is being dicussed by board * Dirk: There is a OSCC meetup today touching the topic * Board looking into using AI to help with possible moderation *** ddemaio will be unavailable for this meeting until the August 9 meeting starting next week ## Dirk CDN contract with Fastly is signed, Fastly is sponsoring openSUSE project with CDN bandwidth Currently added as fallback mirror for North America, South America and Europe lkocman: Will this affect our download metrics? Dirk: Since we don't track downloads from instances other than download-o-o, and we're not switching download-o-o currently. So pretty much same state as before. Step 15.6/SP6 enablement for armv7 Various package updates like usual Added openSUSE Tumbleweed BCI images (SLE BCI images built for opensuse, available on registry.o.org) Location changed from registry.opensuse.org/bci/* to registry.opensuse.org/opensuse/bci/* BCI non-devel images are now available in openSUSE Registry, images are TW based. ## Wolfgang (Package Hub), Scott Bahling Project openSUSE:Backpors:SLE-15-SP6 created in OBS (currently build disabled because of AC issues in SRV1, more build workers will be added latest tomorrow) Creating release package for SP6 (SUSE:Backports:SLE-15-SP6) today in IBS ## Maintenance team (Marcus or Maurizio (m4u)) No big news Firefox needs updates of dependencies before it can be updated to the current version (Security fixes) libzypp update in 15.5 was fixed by releasing missing dependency. libzypp issue that can be properly addressed only with respin of DVD. See section above for more details. openQA is OK currently. (snapper was fixed) Some 15.5 updates from between freeze and GA need to be released, WIP for Marcus Key rotation: Migration with changed 4k key. Current autoimport solution is not ideal. Marcus will work on update of the opensuse-build-key https://en.opensuse.org/SDB:System_upgrade#0._New_4096_bit_RSA_signing_key Marcus is working also on the SLES side, the update of package with the new key was released last week, it's just not activated yet, but it will be already trusted by Leap 15.5 systems. Leap 15.4 is working Leap Micro 5.3 is working Leap Micro 5.4 testing is now passing as well Leap 16.0 - we should revisit the update/sle repo as the current setup not exactly mirror friendly. Solutions could be dropping not so popular architectures or split repositories per architecture. lkocman: 15.3 EOL could lead to stopping our physical Source DVD effort, as it seems we will not produce. As this was the last release which you could still get on a physical media. Lkocman: anything against decomissioning it? Not a single valid request since I've joined SUSE. We did receive only requests for binary install media which are not subject to ^. We do not plan to offer this for any new releases. ## Adrian - OBS Reduced build power at the moment OBS build power is back to normal after fixing misconfiguration which kept workers busy. Servers for OBS is moving to new datacenters until the end of the month of July AC problems in Nüremberg with openQA servers ## Heroes Planning move of download-o-o to Prague along with OBS. Kristyna Streitova would like to setup a new "updated" weblate instance in Prague office. I told her to reach out to heroes, so there is no wasted effort on migrating the old instance. ## Open Floor

1 0

Signature verification failed for file 'repomd.xml' from repository 'Update repository from SUSE Linux Enterprise 15'. Continue? [yes/no] (no):
by Larry Len Rainey 19 Jul '23

19 Jul '23

2 1

OVMF be upgraded to edk2-stable202305 version
by joeyli 19 Jul '23

19 Jul '23

Hi Joerg, Dario, I just upgraded ovmf to edk2-stable202305 version on Virtualization/ovmf, and also submit to openSUSE:Factory/ovmf: https://build.opensuse.org/package/show/Virtualization/ovmf If you found any problem in your fields. Just file bug and add me to Cc, please! Thanks a lot! Joey Lee

1 0

Move of openqa.opensuse.org to new datacenter on 2023-07-19 - Expect unavailability and reduced test capacities
by Oliver Kurz 18 Jul '23

18 Jul '23

Heads up to all users of https://openqa.opensuse.org : The virtual machine serving the webUI and main controlling openQA instance behind that will be moved to a shiny new SUSE datacenter next Wednesday, 2023-07-19. Expect the system to be unavailable for the majority of the day and reduced test capacities for the days after that. Find more details on https://progress.opensuse.org/issues/132143

1 1

New Tumbleweed snapshot 20230717 released!
by Dominique Leuenberger 18 Jul '23

18 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: autofs colord freetype2 (2.13.0 -> 2.13.1) fuse3 (3.15.0 -> 3.15.1) harfbuzz (7.3.0 -> 8.0.1) krb5 (1.20.1 -> 1.21.1) libgudev (237 -> 238) poppler (23.06.0 -> 23.07.0) poppler-qt5 (23.06.0 -> 23.07.0) python-charset-normalizer (3.1.0 -> 3.2.0) python-importlib-metadata (6.6.0 -> 6.8.0) python-lxml rsyslog (8.2212.0 -> 8.2306.0) smartmontools util-linux xterm (382 -> 384) zimg (3.0.4 -> 3.0.5) === Details === ==== autofs ==== - Add autofs-suse-manpage-remove-initdir.patch Removes references of initdir from man pages (bsc#1207881) ==== colord ==== Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2 - Tune _constraints for various architectures. ==== freetype2 ==== Version update (2.13.0 -> 2.13.1) - update to 2.13.1: * New function `FT_Get_Default_Named_Instance` to get the index of the default named instance of an OpenType Variation Font. A new load flag `FT_LOAD_NO_SVG` to make FreeType ignore glyphs in an 'SVG ' table. * New function `FT_GlyphSlot_AdjustWeight` to adjust the glyph weight either horizontally or vertically. This is part of the `ftsynth.h` header file * TrueType interpreter version 38 (also known as 'Infinality') has been deactivated; the value of `TT_INTERPRETER_VERSION_38` is now the same as `TT_INTERPRETER_VERSION_40`. * Switching named instances on and off in Variation Fonts was buggy if the design coordinates didn't change. - drop enable-infinality-subpixel-hinting.patch (obsolete, infinality is deactivated) ==== fuse3 ==== Version update (3.15.0 -> 3.15.1) Subpackages: libfuse3-3 - Update to release 3.15.1 * Reduce default write size by half ==== harfbuzz ==== Version update (7.3.0 -> 8.0.1) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 8.0.1: + Build fix on 32-bit arm. + More speed optimizations: - 60% speedup in retaingids subsetting SourceHanSans-VF. - 38% speed up in subsetting (beyond-64k) mega-merged Noto. - 16% speed up in retain-gid (used for IFT) subsetting of NotoSansCJKkr. - Changes from version 8.0.0: + New, experimental, WebAssembly (WASM) shaper, that provides greater flexibility over OpenType/AAT/Graphite shaping, using WebAssembly embedded inside the font file. Currently WASM shaper is disabled by default and needs to be enabled at build time. + Improvements to Experimental features introduced in earlier releases: - Support for subsetting beyond-64k and VarComposites fonts. - Support for instancing variable fonts with cubic âglyfâ table. - Many big speed optimizations. ==== krb5 ==== Version update (1.20.1 -> 1.21.1) Subpackages: krb5-32bit krb5-client - update to 1.121.1 (CVE-2023-36054): * Fix potential uninitialized pointer free in kadm5 XDR parsing [CVE-2023-36054]. * Added a credential cache type providing compatibility with the macOS 11 native credential cache. * libkadm5 will use the provided krb5_context object to read configuration values, instead of creating its own. * Added an interface to retrieve the ticket session key from a GSS context. * The KDC will no longer issue tickets with RC4 or triple-DES session keys unless explicitly configured with the new allow_rc4 or allow_des3 variables respectively. * The KDC will assume that all services can handle aes256-sha1 session keys unless the service principal has a session_enctypes string attribute. * Support for PAC full KDC checksums has been added to mitigate an S4U2Proxy privilege escalation attack. * The PKINIT client will advertise a more modern set of supported CMS algorithms. * Removed unused code in libkrb5, libkrb5support, and the PKINIT module. * Modernized the KDC code for processing TGS requests, the code for encrypting and decrypting key data, the PAC handling code, and the GSS library packet parsing and composition code. * Improved the test framework's detection of memory errors in daemon processes when used with asan. ==== libgudev ==== Version update (237 -> 238) - Update to version 238: * Fix newline stripping * Add g_udev_device_get_current_tags() * Add a number of tests, and devel docs * Fix devhelp not being able to find the docs * Skip locale test with locale isn't available - Drop patches fixed upstream: * 71b2fda04dd71c637361e8ead103980ad6f27ed5.patch * 4216ecd4513bd4c8af73543817a51d6f72f166cc.patch ==== poppler ==== Version update (23.06.0 -> 23.07.0) Subpackages: libpoppler-cpp0 libpoppler-glib8 poppler-tools - update to 23.07.0: core: * Fix reading of utf8-with-bom files * Fix crash if CERT_ExtractPublicKey doesn't return a public key * Fix rendering of some malformed documents. Issue #1395 * Allow for stream compression and compress font streams in forms Remove method Hints::getPageRanges qt5: * Fix crash when overprint preview is enabled * Don't fail signature basics tests if backend is not configured qt6: * Fix crash when overprint preview is enabled * Don't fail signature basics tests if backend is not configured utils: * pdfsig: Allow showung and selecting signature backend * pdfsig: Describe signature dump format in manual page ==== poppler-qt5 ==== Version update (23.06.0 -> 23.07.0) - update to 23.07.0: core: * Fix reading of utf8-with-bom files * Fix crash if CERT_ExtractPublicKey doesn't return a public key * Fix rendering of some malformed documents. Issue #1395 * Allow for stream compression and compress font streams in forms Remove method Hints::getPageRanges qt5: * Fix crash when overprint preview is enabled * Don't fail signature basics tests if backend is not configured qt6: * Fix crash when overprint preview is enabled * Don't fail signature basics tests if backend is not configured utils: * pdfsig: Allow showung and selecting signature backend * pdfsig: Describe signature dump format in manual page ==== python-charset-normalizer ==== Version update (3.1.0 -> 3.2.0) - update to 3.2.0: * Typehint for function `from_path` no longer enforce `PathLike` as its first argument * Minor improvement over the global detection reliability * Introduce function `is_binary` that relies on main capabilities, and optimized to detect binaries * Propagate `enable_fallback` argument throughout `from_bytes`, `from_path`, and `from_fp` that allow a deeper control over the detection (default True) * Edge case detection failure where a file would contain 'very- long' camel cased word (Issue #289) ==== python-importlib-metadata ==== Version update (6.6.0 -> 6.8.0) - update to 6.8.0: * Require Python 3.8 or later. * #453: When inferring top-level names that are importable for distributions in ``package_distributions``, now symlinks to other directories are honored. ==== python-lxml ==== - Add ISO-Schematron-schema-optional.patch and remove-ISO-Schematron-schema.patch to remove non-free RNG schema file (bsc#1213351). ==== rsyslog ==== Version update (8.2212.0 -> 8.2306.0) - Upgrade to rsyslog 8.2306.0 * 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped * 2023-06-08: Add new global config option "libcapng.default" * 2023-06-08: imjournal: Add FileCreateMode module parameter * 2023-04-17: core bugfix: potential segfault on busy systems * 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred * 2023-05-24: CI: update base ubuntu image for github actions * 2023-05-16: OMHIREDIS::ADDED:: New support for 'stream' mode * 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities * 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure * 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate * 2023-04-25: IMHIREDIS::ADDED:: New support for 'stream' mode * 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module * 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set 'key' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode's value in logs when set incorrectly * 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo * 2023-03-21: modify testbench test to detect wrong imptcp truncation * 2023-03-21: imptcp bugfix: spam log on oversize message * 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown * 2023-03-13: Remove halted LGTM badges on README * 2023-02-16: Do not preserve capabilities when changing credentials * 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset * 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well * 2023-01-18: core/template: implement negative position.to * 2023-01-18: CI: fix github CodeQL settings * 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped * 2023-01-17: Adjust the capability set * 2023-01-13: substring function: enhancement and hardening * 2023-01-11: omfile: add action parameters "rotation.*" * 2023-01-11: CI: use newer version of zookeeper * 2023-01-09: ffaup fix : memory corruption with concurrent workers * 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback * 2022-12-30: testbench: add test for invalid json template generation * 2022-12-30: core bugfix: template system may generate invalid json * 2022-12-28: Fixed wrong type conversion in cstrLen() * 2022-12-08: Add CodeQL workflow for GitHub code scanning ==== smartmontools ==== - smartmontools.generate_smartd_opts.in: Fix generated options when SMARTD_SAVESTATES or SMARTD_ATTRLOG are set to "no" (bsc#1207461). ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - Add patch to detect MD array as container of LUKS properly (boo#1213227, gh#util-linux/util-linux#2373): * 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch ==== xterm ==== Version update (382 -> 384) Subpackages: xterm-bin xterm-resize - update to 384: * exclude ASCII space from showMissingGlyphs, since a few bitmap fonts lack this * correct a step in rendering double-width characters with bitmap-fonts * fixes for ReGIS-related problems: * mimic an undocumented hardware VT340 feature which handles color initialization with incomplete parameters. * handle whitespace between operator/operands for color values. * reset ReGIS-context when resetting graphics in RIS. ==== zimg ==== Version update (3.0.4 -> 3.0.5) - Update to 3.0.5 * colorspace: add ST.428-1 (gamma 2.6) transfer function * depth: fix AVX-512 integer to float border handling (introduced in 2.6) * depth: fix NEON dither border handling (introduced in 3.0) * graph: fix clipping in alpha premultiplication (introduced in 3.0) * x86: optimizations for AMD Zen4 processors - Drop e29571.patch

1 0

New Tumbleweed snapshot 20230716 released!
by Dominique Leuenberger 17 Jul '23

17 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (115.0.1 -> 115.0.2) audit (3.0.9 -> 3.1.1) audit-secondary (3.0.9 -> 3.1.1) bind cryptsetup iproute2 (6.3 -> 6.4) kernel-source (6.4.2 -> 6.4.3) libHX (4.13 -> 4.14) libbpf (1.2.0 -> 1.2.2) libvirt (9.4.0 -> 9.5.0) python-libvirt-python (9.4.0 -> 9.5.0) qpdf (11.4.0 -> 11.5.0) rpm-config-SUSE (20220926 -> 20230712) texlive util-linux util-linux-systemd === Details === ==== MozillaFirefox ==== Version update (115.0.1 -> 115.0.2) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 115.0.2 * Fixed a bug with displaying a caret in the text editor on some websites (bmo#1840804) * Fixed a bug with broken audio rendering on some websites (bmo#1841982) * Fixed a bug with patternTransform translate using the wrong units (bmo#1840746) MFSA 2023-26 (bsc#1213230) * CVE-2023-3600 (bmo#1839703) Use-after-free in workers ==== audit ==== Version update (3.0.9 -> 3.1.1) Subpackages: libaudit1 libaudit1-32bit libauparse0 - Update to 3.1.1: * Add user friendly keywords for signals to auditctl * In ausearch, parse up URINGOP and DM_CTRL records * Harden auparse to better handle corrupt logs * Fix a CFLAGS propogation problem in the common directory * Move the audispd af_unix plugin to a standalone program - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Enable livepatching on main library on x86_64. - Update to 3.1: * Disable ProtectControlGroups in auditd.service by default * Fix rule checking for exclude filter * Make audit_rule_syscallbyname_data work correctly outside of auditctl * Add new record types * Add io_uring support * Add support for new FANOTIFY record fields * Add keyword, this-hour, to ausearch/report start/end options * Add Requires.private to audit.pc file * Try to interpret OPENAT2 fields correctly ==== audit-secondary ==== Version update (3.0.9 -> 3.1.1) Subpackages: audit python3-audit system-group-audit - Update to 3.1.1: * Add user friendly keywords for signals to auditctl * In ausearch, parse up URINGOP and DM_CTRL records * Harden auparse to better handle corrupt logs * Fix a CFLAGS propogation problem in the common directory * Move the audispd af_unix plugin to a standalone program - Add _multibuild to define additional spec files as additional flavors. Eliminates the need for source package links in OBS. - Update to 3.1: * Disable ProtectControlGroups in auditd.service by default * Fix rule checking for exclude filter * Make audit_rule_syscallbyname_data work correctly outside of auditctl * Add new record types * Add io_uring support * Add support for new FANOTIFY record fields * Add keyword, this-hour, to ausearch/report start/end options * Add Requires.private to audit.pc file * Try to interpret OPENAT2 fields correctly ==== bind ==== Subpackages: bind-doc bind-utils - Enable dnstap support ==== cryptsetup ==== Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12 - luksFormat: Handle system with low memory and no swap space [bsc#1211079] * Check for physical memory available also in PBKDF benchmark. * Try to avoid OOM killer on low-memory systems without swap. * Use only half of detected free memory on systems without swap. * Add patches: - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch ==== iproute2 ==== Version update (6.3 -> 6.4) Subpackages: iproute2-bash-completion - Update to release 6.4 * bridge: mdb: added underlay destination IP support, UDP destination port support, destination VNI support, source VNI support, outgoing interface support * macvlan: added the "bclim" parameter ==== kernel-source ==== Version update (6.4.2 -> 6.4.3) - Linux 6.4.3 (bsc#1012628). - mm: call arch_swap_restore() from do_swap_page() (bsc#1012628). - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (bsc#1012628). - commit 5fb5b21 ==== libHX ==== Version update (4.13 -> 4.14) - Update to release 4.14 * socket: make HX_addrport_split work on portless bracketed hostspec ==== libbpf ==== Version update (1.2.0 -> 1.2.2) - update to v1.2.2: * fix a regression in perf tool caused by libbpf resetting its custom catch-all SEC() handler on explicit bpf_program__set_type() call * fix possible double-free in USDT-related libbpf code, which happens when libbpf runs out of space in __bpf_usdt_specs map due to having too many unique USDT specs ==== libvirt ==== Version update (9.4.0 -> 9.5.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - libxl: Improve handling of errors across migration phases bsc#1213186 - apparmor: Support local overrides in all profiles and abstractions spec: Don't replace /etc/apparmor.d/<profile> on package upgrade spec: No longer package empty /etc/apparmor.d/local/* files bsc#1211472 - Update to libvirt 9.5.0 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-5-0-2023-07-03 - Add upstream commit 5f7f6ceb47 to fix builds on Leap 15.x - Drop downstream commit adding SUSE-specific migration parameters ==== python-libvirt-python ==== Version update (9.4.0 -> 9.5.0) - Update to 9.5.0 - Add all new APIs and constants in libvirt 9.5.0 ==== qpdf ==== Version update (11.4.0 -> 11.5.0) - Update to 11.5.0: * When copying the same page more than once, ensure that annotations are copied and not shared among multiple pages. * Add new method Buffer::copy and deprecate Buffer copy constructor and assignment operator. Buffer copies are expensive and should be done explicitly. * The source code was reformatted to 100 columns instead of 80. Numerous cosmetic changes and changes suggested by clang-tidy were made. ==== rpm-config-SUSE ==== Version update (20220926 -> 20230712) - Update to version 20230712: * Add more prjconf macros * update comment about _lto_cflags * drop %usrmerged macro (boo#1206798) * Fix SLE sbat macros used on Leap (bsc#1198458) ==== texlive ==== Subpackages: libkpathsea6 libsynctex2 - The rungs lua script belongs to texlive-scripts(-bin) only ==== util-linux ==== - Add patch to detect MD array as container of LUKS properly (boo#1213227, gh#util-linux/util-linux#2373): * 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch ==== util-linux-systemd ==== - Add patch to detect MD array as container of LUKS properly (boo#1213227, gh#util-linux/util-linux#2373): * 0001-Revert-libblkid-try-LUKS2-first-when-probing.patch

1 0

Why does the installer still use LUKS1 by default?
by zaper＠dmc.chat 17 Jul '23

17 Jul '23

Hello, Why does the OpenSUSE installer still use LUKS1 with decryption handled by grub by default instead of using LUKS2 and handing off the decryption to systemd-cryptsetup? Thank you. Regards, Zaper

4 5

New Tumbleweed snapshot 20230714 released!
by Dominique Leuenberger 15 Jul '23

15 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ibus-table (1.17.0 -> 1.17.1) libnftnl (1.2.5 -> 1.2.6) libshumate (1.0.3 -> 1.0.4) python311-pyparsing (3.0.9 -> 3.1.0) redis (7.0.11 -> 7.0.12) snapper unixODBC === Details === ==== ibus-table ==== Version update (1.17.0 -> 1.17.1) - Update version to 1.17.1 * Fix mypy warnings * Return empty program_name and window_title in get_active_window_xprop() when xprop results are unexpected (Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2215466) * Translation update from Weblate ==== libnftnl ==== Version update (1.2.5 -> 1.2.6) - Update to release 1.2.6 * expr: meta: introduce broute meta expression ==== libshumate ==== Version update (1.0.3 -> 1.0.4) Subpackages: libshumate-1_0-1 libshumate-lang typelib-1_0-Shumate-1_0 - Update to version 1.0.4: + Throttle tile download during animations. ==== python311-pyparsing ==== Version update (3.0.9 -> 3.1.0) - Add upstream patch limit-error-messages.patch as a part of a workaround for boo#1213007 - update to 3.1.0 * API ENHANCEMENT: `Optional(expr)` may now be written as `expr | ""` * Added new class property `identifier` to all Unicode set classes in `pyparsing.unicode`, using the class's values for `cls.identchars` and `cls.identbodychars`. * ParseResults` now has a new method `deepcopy()`, in addition to the current `copy()` method. * Reworked `delimited_list` function into the new `DelimitedList` class. * Added new class method `ParserElement.using_each` * Added new builtin `python_quoted_string`, which will match any form of single-line or multiline quoted strings defined in Python. * `ParserElement.validate()` is deprecated. * Added bool `embed` argument to `ParserElement.create_diagram()`. * Added support for Python 3.12. * Updated `create_diagram()` code to be compatible with railroad-diagrams package version 3.0. * Many other changes, see upstream CHANGES ==== redis ==== Version update (7.0.11 -> 7.0.12) - redis 7.0.12: * (CVE-2022-24834) A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson and cmsgpack libraries, and result in heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. (bsc#1213193) * (CVE-2023-36824) Extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Specifically: using COMMAND GETKEYS* and validation of key names in ACL rules. (bsc#1213249) * Re-enable downscale rehashing while there is a fork child * Fix possible hang in HRANDFIELD, SRANDMEMBER, ZRANDMEMBER when used with <count> * Improve fairness issue in RANDOMKEY, HRANDFIELD, SRANDMEMBER, ZRANDMEMBER, SPOP, and eviction * Fix WAIT to be effective after a blocked module command being unblocked * Avoid unnecessary full sync after master restart in a rare case ==== snapper ==== Subpackages: libsnapper7 snapper-zypp-plugin - document disadvantage of using network users and order services after nss-user-lookup (gh#openSUSE/snapper#823) ==== unixODBC ==== - Add missing requires for glibc-locale-base, required for utf16 codec (bsc#1213242)

1 0

Please reboot after upgrading to SDDM 0.20 (Snapshot 20230630+)
by Fabian Vogt 14 Jul '23

14 Jul '23

Hi, in SDDM 0.20, the protocol between the greeter and the daemon changed a bit, which means the greeter from 0.20 will not start properly if the daemon from 0.19 is still running. It's not possible to restart the daemon automatically during/after the upgrade, as this would stop all sessions. The result is that directly after upgrading to sddm 0.20, performing a logout will end up in a black screen. So instead of logging out, just select reboot or shut down directly. If you by accident end up at the black screen, press Ctrl-Alt-F1 to switch to a console and press Ctrl-Alt-Del to trigger a reboot. Or log in as root and run "rcxdm restart; exit" to restart the daemon. Cheers, Fabian

4 6

New Tumbleweed snapshot 20230713 released!
by Dominique Leuenberger 14 Jul '23

14 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: audacity glibc libguestfs === Details === ==== audacity ==== Subpackages: audacity-lang - Update constraints for riscv64 ==== glibc ==== Subpackages: glibc-32bit glibc-devel glibc-extra glibc-lang glibc-locale glibc-locale-base nscd - gshadow-erange-rhandling.patch: gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (BZ #30151) - system-sigchld-block.patch: posix: Fix system blocks SIGCHLD erroneously (BZ #30163) - gmon-buffer-alloc.patch: gmon: Fix allocated buffer overflow (BZ #29444) - check-pf-cancel-handler.patch: __check_pf: Add a cancellation cleanup handler (BZ #20975) - powerpc64-fcntl-lock.patch: io: Fix F_GETLK, F_SETLK, and F_SETLKW for powerpc64 - realloc-limit-chunk-reuse.patch: realloc: Limit chunk reuse to only growing requests (BZ #30579) - dl-find-object-return.patch: elf: _dl_find_object may return 1 during early startup (BZ #30515) - Need to build with GCC 12 as minimum - fix-locking-in-_IO_cleanup.patch: Update to final version ==== libguestfs ==== Subpackages: libguestfs-xfs libguestfs0 - bsc#1212972 - cannot find any suitable libguestfs supermin libguestfs.spec

1 0

Tumbleweed - Review of the weeks 2023/27 & 28
by Dominique Leuenberger 14 Jul '23

14 Jul '23

Dear Tumbleweed users and hackers, The vacation season is upon us, and the number of requests to Tumbleweed is slightly lower than normal. Nevertheless, there is a constant flow of updates coming your way. Due to my slacking off last week, this review again spans two weeks. In total, 11 snapshots have been published in this time (0701, 0703…0710, 0712, and 0713) These 11 snapshots brought you the following changes: * GStreamer 1.22.4 * Network Manager 1.42.8 * linux-glibc-devel 6.4 * MariaDB 11.0.2 * Mozilla Firefox 115.0 & 115.0.1 * Python 3.11.4 & 3.12.0b3 * KDE Gear 23.04.3 * KDE Frameworks 5.108.0 * GNOME 44.3 * Linux kernel 6.4.2 (lockdown accidentally not enabled) * wine 8.12 * Protobuf 23.4 * exiv2 0.28.0 Based on the staging projects, the following updates are likely to reach you soon: * Linux kernel 6.4.3 – with lockdown enabled * systemd 253.6 * Mozilla Firefox 115.0.2 * libvirt 9.5.0 Cheers, Dominique

1 0

Feedback
by Leandro Almeida 14 Jul '23

14 Jul '23

Hello, when downloading the Fishing planet game on steam, opensuse stopped my internet a few times too. The internet here is good, 100mbps There is also an sgx error, I leave it enabled in the bios, and at boot it always appears that sgx is disabled. It also has acpi not found error, and acpi bios error and x509. There are also some missing drivers for my pc. Videos at 4k60fps in Firefox have improved, this one has very few crashes, I believe it stabilizes soon 😃 In google chrome I haven't seen it yet, I couldn't install it, it gives an error in the sha512 key inside yast, but I believe it will be good too. Support for audio and video hardware acceleration, hardware acceleration, is the solution, along with the codecs, frameworks and other dependencies found in Windows 11, it solves everything. 😃 Lenovo ideapad 330 15igm 81fn intel celeron n4000 crucial 8gb ram ssd 256gb ceamere Opensuse tumbleweed kde plasma wayland Thank you very much in advance. 👍

3 2

Suggestion to include packets openmarc and postfix-policyd-spf-perl in factory
by Freek de Kruijf 14 Jul '23

14 Jul '23

Recently I experienced problems with sending e-mail to a gmail.com address. The message was rejected because it could not be checked with either a SPF record in the DNS or a DKIM signature. I am investigating what it takes to adhere to the protection standards for email and found that the packet amavisd-new supports DKIM, both signing and checking. Also opendkim, to be used for signing en checking, can be found on the standard openSUSE repositories. But SPF checking, postfix-policyd-spf- perl, comes from another repository to be found on software.opensuse.org. The same is true for DMARC checking and reporting. software.opensuse.org shows several packages, of which I use opendmarc. My question is worded in the subject. -- fr.gr. member openSUSE Freek de Kruijf

1 0

New Tumbleweed snapshot 20230712 released!
by Dominique Leuenberger 13 Jul '23

13 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: blog (2.26 -> 2.27) cpio (2.13 -> 2.14) gcc13 (13.1.1+git7364 -> 13.1.1+git7552) glib2 (2.76.3 -> 2.76.4) gnome-shell (44.2 -> 44.3) gpgme (1.20.0 -> 1.21.0) gpgmeqt (1.20.0 -> 1.21.0) gstreamer-plugins-rs (0.10.6 -> 0.10.9) hwdata (0.371 -> 0.372) kernel-firmware (20230620 -> 20230707) kernel-source (6.3.9 -> 6.4.2) libgphoto2 libnice libqt5-qtgraphicaleffects libstorage-ng (4.5.122 -> 4.5.123) mutter (44.2 -> 44.3) ncurses (6.4.20230617 -> 6.4.20230701) openafs (1.8.9 -> 1.8.10) perl-Cpanel-JSON-XS (4.36 -> 4.37) perl-GD (2.76 -> 2.78) perl-HTTP-Date (6.05 -> 6.06) perl-Mail-DKIM (1.20230212 -> 1.20230630) perl-Mojolicious (9.32 -> 9.33) perl-Net-HTTP (6.22 -> 6.23) perl-libwww-perl (6.70 -> 6.71) publicsuffix (20230616 -> 20230709) python-M2Crypto (0.38.0 -> 0.39.0) python-cryptography (41.0.1 -> 41.0.2) python-rich (13.4.1 -> 13.4.2) qt6-declarative util-linux util-linux-systemd vim virtualbox virtualbox-kmp (7.0.8_k6.3.9_1 -> 7.0.8_k6.4.2_1) wtmpdb (0.7.0 -> 0.7.1) yast2-installation (4.6.4 -> 4.6.5) yast2-storage-ng (4.6.11 -> 4.6.12) yast2-trans (84.87.20230630.ccfa6add46 -> 84.87.20230708.d1de37aed1) === Details === ==== blog ==== Version update (2.26 -> 2.27) Subpackages: blog-plymouth libblogger2 - Fix big endian cast problems to be able to read commands and ansers (blogctl) as well as passphrases (blogd) ==== cpio ==== Version update (2.13 -> 2.14) Subpackages: cpio-lang cpio-mt - Backport upstream fix for --no-absolute-filenames --make-directories * fix-operation-no-absolute-filenames.patch - Update to 2.14: * New option --ignore-dirnlink Valid in copy-out mode, it instructs cpio to ignore the actual number of links reported for each directory member and always store 2 instead. * Changes in --reproducible option The --reproducible option implies --ignore-dirlink. In other words, it is equivalent to --ignore-devno --ignore-dirnlink --renumber-inodes. * Use GNU ls algorithm for deciding timestamp format in -tv mode * Fix cpio header verification. * Fix handling of device numbers on copy out. * Fix calculation of CRC in copy-out mode. * Rewrite the fix for CVE-2015-1197. * Fix combination of --create --append --directory. * Fix appending to archives bigger than 2G. - Refresh patches: * cpio-open_nonblock.patch * cpio-dev_number.patch * cpio-default_tape_dev.patch * cpio-pattern-file-sigsegv.patch - Remove patches: * cpio-revert-CVE-2015-1197-fix.patch * fix-CVE-2021-38185.patch * fix-CVE-2021-38185_2.patch * fix-CVE-2021-38185_3.patch ==== gcc13 ==== Version update (13.1.1+git7364 -> 13.1.1+git7552) Subpackages: cpp13 gcc13-locale libasan8 libatomic1 libgcc_s1 libgccjit0 libgfortran5 libgomp1 libhwasan0 libitm1 liblsan0 libobjc4 libquadmath0 libstdc++6 libstdc++6-devel-gcc13 libstdc++6-locale libstdc++6-pp libtsan2 libubsan1 - Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552 - Remove gcc13-pr110334.patch again as it breaks libreoffice build. - Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489. - Add gcc13-pr110334.patch to fix missed optimization in Skia resulting in Firefox crashes when building with LTO. [boo#1212101] - Raise architecture levels for ALP. [PED-153] * Raise POWER architecture baseline to power9. [PED-2005] * Raise x86-64 architecture baseline to x86-64-v2 for ALP. [PED-252] * Delay raising s390x architecture baseline to z14. [PED-253] ==== glib2 ==== Version update (2.76.3 -> 2.76.4) Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 - Update to version 2.76.4: + Fix build failure on Android with `statx()` support + Bugs fixed: - glib-compile-schemas failed on directory name with no Latin symbols - Build failure due to statx fields with NDK r25.c - glib-compile-resources: Fix non-ASCII arg parsing on Windows - glib: reset errno to 0 when futex() returns EAGAIN - Avoid stack overflow in gspawn on macOS - glocalfileinfo: Fix incorrect use of struct statx.st_mtimensec on Android + Updated translations. ==== gnome-shell ==== Version update (44.2 -> 44.3) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 44.3: + Fix cursor offset when using magnifier. + Fix missing workspace borders after wallpaper changes. + Revert screencast optimization that results in bogus windows. + Misc. bug fixes and cleanups. + Updated translations. ==== gpgme ==== Version update (1.20.0 -> 1.21.0) Subpackages: libgpgme11 libgpgmepp6 - Update to 1.21.0 * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign to allow writing the output directly to a file. [T6530] * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the input data directly from files. [T6530] * For key signing and uid revoking allow an empty user id. [rMfbc3963d62] * Pass an input-size-hint also to the gpgsm engine. [T6534] * qt: Allow writing the created archives directly to a file. [T6530] * qt: Allow reading the signed/encrypted archive to decrypt or verify directly from a file. [T6530] * qt: Qt Jobs working with QIODeviceDataProvider now properly handle input-size hints and progress for files larger. 2^32 bytes in 32 bit builds. [T6534] * cpp: Error::isCanceled now also returns true for error code GPG_ERR_FULLY_CANCELED. [T6510] * python: Fix wrong use of write. [T6501] * Interface changes relative to the 1.20.0 release: - cpp: Data::setFlag NEW. - cpp: Data::setSizeHint NEW. - qt: Job::startIt NEW. - qt: DecryptVerifyArchiveJob::setInputFile NEW. - qt: DecryptVerifyArchiveJob::inputFile NEW. - qt: EncryptArchiveJob::setRecipients NEW. - qt: EncryptArchiveJob::recipients NEW. - qt: EncryptArchiveJob::setInputPaths NEW. - qt: EncryptArchiveJob::inputPaths NEW. - qt: EncryptArchiveJob::setOutputFile NEW. - qt: EncryptArchiveJob::outputFile NEW. - qt: EncryptArchiveJob::setEncryptionFlags NEW. - qt: EncryptArchiveJob::encryptionFlags NEW. - qt: SignArchiveJob::setSigners NEW. - qt: SignArchiveJob::signers NEW. - qt: SignArchiveJob::setInputPaths NEW. - qt: SignArchiveJob::inputPaths NEW. - qt: SignArchiveJob::setOutputFile NEW. - qt: SignArchiveJob::outputFile NEW. - qt: SignEncryptArchiveJob::setSigners NEW. - qt: SignEncryptArchiveJob::signers NEW. - qt: SignEncryptArchiveJob::setRecipients NEW. - qt: SignEncryptArchiveJob::recipients NEW. - qt: SignEncryptArchiveJob::setInputPaths NEW. - qt: SignEncryptArchiveJob::inputPaths NEW. - qt: SignEncryptArchiveJob::setOutputFile NEW. - qt: SignEncryptArchiveJob::outputFile NEW. - qt: SignEncryptArchiveJob::setEncryptionFlags NEW. - qt: SignEncryptArchiveJob::encryptionFlags NEW. ==== gpgmeqt ==== Version update (1.20.0 -> 1.21.0) - Update to 1.21.0 * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign to allow writing the output directly to a file. [T6530] * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the input data directly from files. [T6530] * For key signing and uid revoking allow an empty user id. [rMfbc3963d62] * Pass an input-size-hint also to the gpgsm engine. [T6534] * qt: Allow writing the created archives directly to a file. [T6530] * qt: Allow reading the signed/encrypted archive to decrypt or verify directly from a file. [T6530] * qt: Qt Jobs working with QIODeviceDataProvider now properly handle input-size hints and progress for files larger. 2^32 bytes in 32 bit builds. [T6534] * cpp: Error::isCanceled now also returns true for error code GPG_ERR_FULLY_CANCELED. [T6510] * python: Fix wrong use of write. [T6501] * Interface changes relative to the 1.20.0 release: - cpp: Data::setFlag NEW. - cpp: Data::setSizeHint NEW. - qt: Job::startIt NEW. - qt: DecryptVerifyArchiveJob::setInputFile NEW. - qt: DecryptVerifyArchiveJob::inputFile NEW. - qt: EncryptArchiveJob::setRecipients NEW. - qt: EncryptArchiveJob::recipients NEW. - qt: EncryptArchiveJob::setInputPaths NEW. - qt: EncryptArchiveJob::inputPaths NEW. - qt: EncryptArchiveJob::setOutputFile NEW. - qt: EncryptArchiveJob::outputFile NEW. - qt: EncryptArchiveJob::setEncryptionFlags NEW. - qt: EncryptArchiveJob::encryptionFlags NEW. - qt: SignArchiveJob::setSigners NEW. - qt: SignArchiveJob::signers NEW. - qt: SignArchiveJob::setInputPaths NEW. - qt: SignArchiveJob::inputPaths NEW. - qt: SignArchiveJob::setOutputFile NEW. - qt: SignArchiveJob::outputFile NEW. - qt: SignEncryptArchiveJob::setSigners NEW. - qt: SignEncryptArchiveJob::signers NEW. - qt: SignEncryptArchiveJob::setRecipients NEW. - qt: SignEncryptArchiveJob::recipients NEW. - qt: SignEncryptArchiveJob::setInputPaths NEW. - qt: SignEncryptArchiveJob::inputPaths NEW. - qt: SignEncryptArchiveJob::setOutputFile NEW. - qt: SignEncryptArchiveJob::outputFile NEW. - qt: SignEncryptArchiveJob::setEncryptionFlags NEW. - qt: SignEncryptArchiveJob::encryptionFlags NEW. ==== gstreamer-plugins-rs ==== Version update (0.10.6 -> 0.10.9) - Update to version 0.10.9: + Fixed: - mp4mux/fmp4mux: Fix byte order in Opus extension box. - webrtcsrc: Add twcc extension to the codec-preferences when present. - webrtcsink: Don't try using cudaconvert if it is not present. - mccparse: Don't offset the first timecode to a zero PTS. - Correctly use MPL as license specifier instead of MPL-2 for plugins that compile with GStreamer < 1.20. + Added: fallbackswitch: Add stop-on-eos property. - Changes from version 0.10.8: + Fixed: - fmp4mux: . Use updated start PTS when checking if a stream is filled instead of a stale one. . Fix various issues with stream gaps, especially in the beginning. . Fix waiting in live pipelines. - uriplaylistbin: Prevent deadlocks during property notifications. - webrtcsink: Fix panics during twcc-stats callback and related issues. - awstranscriber: Handle stream disconts correctly. - roundedcorners: Fix caps negotiation to not use I420 if a border radius is configured. - whipsink: Use the correct pad template to request pads from the internal webrtcbin. - fallbacksrc: Don't apply fallback audio caps to the main stream. - webrtcsrc: Fix caps handling during transceiver creation. + Changed: rtpgccbwe: Improve packet handling. - Changes from version 0.10.7: + Fixed: - ffv1dec: Drop rank until the implementation is feature-complete. - spotifyaudiosrc: Check cached credentials before use and fix usage of credentials cache. - tttocea608: Specify raw CEA608 field. - gtk4paintablesink: Fix compilation on non-Linux UNIX systems. - webrtcsrc: Don't set stun-server to the empty string if none was set. - webrtcsink: Abort statistics collection before stopping the signaller. - rtpgccbwe: Don't process empty lists. + Changed: - ndi: Update to libloading 0.8. - aws: Update to AWS SDK 0.55/0.27. - webrtcsink: Order pads by serial number. - Update to async-tungstenite 0.22. + Added: webrtcsink/webrtcsrc: Add request-encoded-filter signal to add support for inserting custom filters between encoder/payloader or depayloader/decoder. This allows interacting with the "insertable streams" API from Chrome. - Disable cargo audit service for now, something is not working correctly in the service. - Use %build_rustflags instead of the deprecated %__default_rustflags macro. Requires at least cargo-packaging 1.2.0+3. ==== hwdata ==== Version update (0.371 -> 0.372) - update to 0.372: * Update pci, usb and vendor ids ==== kernel-firmware ==== Version update (20230620 -> 20230707) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20230707 (git commit d3f66064cf43): * Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5" * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: Update firmware file for Intel Bluetooth AX203 * linux-firmware: Update firmware file for Intel Bluetooth AX203 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX211 * linux-firmware: Update firmware file for Intel Bluetooth AX210 * linux-firmware: Update firmware file for Intel Bluetooth AX200 * linux-firmware: Update firmware file for Intel Bluetooth AX201 * Fix qcom ASoC tglp WHENCE entry * check_whence: Check link targets are valid * iwlwifi: add new FWs from core80-39 release * iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release * qcom: Add Audio firmware for SC8280XP X13s * Makefile, copy-firmware: support xz/zstd compressed firmware * copy-firmware: silence the last shellcheck warnings * copy-firmware: drop obsolete backticks, quote * copy-firmware: tweak sed invocation * copy-firmware: quote deskdir and dirname * check_whence: error if symlinks are in-tree * check_whence: error if File: is actually a link * check_whence: strip quotation marks * linux-firmware: wilc1000: update WILC1000 firmware to v16.0 * ice: update ice DDP wireless_edge package to 1.3.10.0 * amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5 - Update aliases ==== kernel-source ==== Version update (6.3.9 -> 6.4.2) - Refresh patches.suse/fork-lock-VMAs-of-the-parent-process-when-forking.patch. Replace by the correct one. It was merged to upstream twice. And this is the right version. - commit b97b894 - Update vanilla config files. Just run oldconfig for vanillas too. No actual changes. - commit dcdca04 - Update patches.kernel.org/6.4.1-021-mm-always-expand-the-stack-with-the-mmap-write… (bsc#1012628 bsc#1212395 CVE-2023-3269). Add references to CVE. - commit 5a45f18 - Update config files. Only run_oldconfig. - commit 37ad463 - fork: lock VMAs of the parent process when forking (bsc#1212775). - mm: lock a vma before stack expansion (bsc#1212775). - mm: lock newly mapped VMA which can be modified after it becomes visible (bsc#1212775). - mm: lock newly mapped VMA with corrected ordering (bsc#1212775). - Update config files. - Delete patches.suse/Revert-x86-mm-try-VMA-lock-based-page-fault-handling.patch. Drop the downstream revert in favor of upstream fixes above and reset the configs -- leave STATS off as per default. - commit e2dafc9 - Linux 6.4.2 (bsc#1012628). - arch/arm64/mm/fault: Fix undeclared variable error in do_page_fault() (bsc#1012628). - drm/amdgpu: Validate VM ioctl flags (bsc#1012628). - dm ioctl: Avoid double-fetch of version (bsc#1012628). - docs: Set minimal gtags / GNU GLOBAL version to 6.6.5 (bsc#1012628). - scripts/tags.sh: Resolve gtags empty index generation (bsc#1012628). - hugetlb: revert use of page_cache_next_miss() (bsc#1012628). - nubus: Partially revert proc_create_single_data() conversion (bsc#1012628). - Revert "cxl/port: Enable the HDM decoder capability for switch ports" (bsc#1012628). - nfs: don't report STATX_BTIME in ->getattr (bsc#1012628). - execve: always mark stack as growing down during early stack setup (bsc#1012628). - PCI/ACPI: Call _REG when transitioning D-states (bsc#1012628). - PCI/ACPI: Validate acpi_pci_set_power_state() parameter (bsc#1012628). - tools/nolibc: x86_64: disable stack protector for _start (bsc#1012628). - xtensa: fix lock_mm_and_find_vma in case VMA not found (bsc#1012628). - commit 648ac3b - regulator: axp20x: Add AXP15060 support. - commit db7b000 - Revert "Refresh patches.rpmify/usrmerge-Adjust-module-path-in-the-kernel-sources.patch." This reverts commit b8411965e8341c82ba2e01bb38698945be2390a0. It breaks the build: + ln -s /usr/src/linux-6.4.1-1 /home/abuild/rpmbuild/BUILDROOT/kernel-default-6.4.1-1.1.x86_64/usr/lib/modules/6.4.1-1-default/source ln: failed to create symbolic link '/home/abuild/rpmbuild/BUILDROOT/kernel-default-6.4.1-1.1.x86_64/usr/lib/modules/6.4.1-1-default/source': No such file or directory - commit 3561b10 - drm/amd: Don't try to enable secure display TA multiple times (bsc#1212848). - drm/amdgpu: fix number of fence calculations (bsc#1212848). - drm/amd/display: perform a bounds check before filling dirty rectangles (bsc#1212848). - drm/amdgpu: check RAS irq existence for VCN/JPEG (bsc#1212848). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (bsc#1212848). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848). - drm/amd/display: Fix 128b132b link loss handling (bsc#1212848). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848). - drm/amd/display: add a NULL pointer check (bsc#1212848). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848). - drm/amdgpu: Skip mark offset for high priority rings (bsc#1212848). - drm/amdgpu: make sure that BOs have a backing store (bsc#1212848). - drm/amdgpu: make sure BOs are locked in amdgpu_vm_get_memory (bsc#1212848). - commit a695138 - Remove more packaging cruft for SLE < 12 SP3 - commit a16781c - Linux 6.4.1 (bsc#1012628). - x86/microcode/AMD: Load late on both threads too (bsc#1012628). - x86/smp: Make stop_other_cpus() more robust (bsc#1012628). - x86/smp: Dont access non-existing CPUID leaf (bsc#1012628). - x86/smp: Remove pointless wmb()s from native_stop_other_cpus() (bsc#1012628). - x86/smp: Use dedicated cache-line for mwait_play_dead() (bsc#1012628). - x86/smp: Cure kexec() vs. mwait_play_dead() breakage (bsc#1012628). ... changelog too long, skipping 81 lines ... - commit 4b7bbac ==== libgphoto2 ==== Subpackages: libgphoto2-6 libgphoto2-6-lang libgphoto2_port12 - drop lockdev support (boo#1212801) ==== libnice ==== Subpackages: gstreamer-libnice libnice10 - Add 4b63250c.patch: agent/meson: Replace filename with basename. This avoids emitting absolute paths into generated sourcecode, it improves reproducibility. ==== libqt5-qtgraphicaleffects ==== - Fix broken QML dependency ==== libstorage-ng ==== Version update (4.5.122 -> 4.5.123) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - Translated using Weblate (Georgian) (bsc#1149754) - 4.5.123 ==== mutter ==== Version update (44.2 -> 44.3) Subpackages: mutter-lang - Update to version 44.3: + Ensure preferred monitor mode is always included. + Avoid rapidly toggling dynamic max render time. + Fix dynamic max render time blocking with direct scanout. + Misc. bug fixes. + Updated translations. ==== ncurses ==== Version update (6.4.20230617 -> 6.4.20230701) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20230701 + fix mandoc warnings about unnecessary markup. + improve parameter check in tparm_setup() - Extend compiled in fall back terminals with xterm-256color and ms-terminal (the first is now a days more common and second one is useful for ssh connections to MS(tm)) - Add ncurses patch 20230624 + fixes for out-of-memory condition (report by "eaglegai"). - Add ncurses patch 20230625 + adjust man/make_sed.sh to work with dates as the third field of TH. + fixes for out-of-memory condition (report by "eaglegai"). ==== openafs ==== Version update (1.8.9 -> 1.8.10) Subpackages: openafs-client openafs-kmp-default - update to official openafs-1.8.10 - remove obsolete patches: * 7a3ad3bc.diff * b885159.diff * f6fbb85.diff * 4cf7a9a.diff ==== perl-Cpanel-JSON-XS ==== Version update (4.36 -> 4.37) - updated to 4.37 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.37 2023-07-04 (rurban) - Fix NAN/INF for AIX (Tux: AIX-5.3, tested by XSven on AIX-7.3) GH #165 - Fix empty string result in object stringification (PR #221 jixam) - Allow \' in strings when allow_singlequote is enabled (PR #217 warpspin) ==== perl-GD ==== Version update (2.76 -> 2.78) - Updated GD-cflags.patch - updated to 2.78 see /usr/share/doc/packages/perl-GD/ChangeLog 2.78 * Fix Use of uninitialized value $pkg in concatenation warning (RT #148899 and GH #47). Thanks to ppisar for the analysis. Adds a new hard Test::NoWarnings test requirement. 2.77 * add BMP support with libgd 2.1.0, PR #49 by PeterCJ * don't link to -lXPM without XPM nor X11, GH #45 * rename ANIMGIF feature to GIFANIM * fix unused variable failure in GH CI, RT #141125 by PhilterPaper ==== perl-HTTP-Date ==== Version update (6.05 -> 6.06) - updated to 6.06 see /usr/share/doc/packages/perl-HTTP-Date/Changes 6.06 2023-07-06 22:29:55Z - Use copyright year rather than range (GH#18) (Olaf Alders) - Replace "Test" with "Test::More" (GH#20) (James Raspass) - Remove the executable bit from the test (GH#21) (James Raspass) - Add support for Windows four-digit year format (GH#23) (Grant Street Group) ==== perl-Mail-DKIM ==== Version update (1.20230212 -> 1.20230630) - updated to 1.20230630 see /usr/share/doc/packages/perl-Mail-DKIM/Changes 1.20230630 2023-06-30 UTC * Add support for Ed25519 signature types Thanks to MatthÃ¤us Wander @mwander * Option to add custom tags to generated signatures ==== perl-Mojolicious ==== Version update (9.32 -> 9.33) - updated to 9.33 see /usr/share/doc/packages/perl-Mojolicious/Changes ==== perl-Net-HTTP ==== Version update (6.22 -> 6.23) - updated to 6.23 see /usr/share/doc/packages/perl-Net-HTTP/Changes 6.23 2023-06-16 11:46:01Z - Don't treat HTTP header names as case sensitive in test (GH#81) (Olaf Alders) ==== perl-libwww-perl ==== Version update (6.70 -> 6.71) - updated to 6.71 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.71 2023-06-20 19:44:19Z - Use rather than require Module::Load (GH#435) (Olaf Alders) ==== publicsuffix ==== Version update (20230616 -> 20230709) - Update to version 20230709: * util: gTLD data autopull updates for 2023-07-08T15:13:17 UTC (#1796) * util: gTLD data autopull updates for 2023-07-01T15:13:05 UTC (#1791) * AWS Submissions to the Public Suffix List - Q1 2023 (#1600) ==== python-M2Crypto ==== Version update (0.38.0 -> 0.39.0) - Update to 0.39.0: - SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE COMPLETELY REMOVED IN THE NEXT RELEASE. - Remove dependency on parameterized and use unittest.subTest instead. - Upgrade embedded six.py module to 1.16.0 (really tiny inconsequential changes). - Make tests working on MacOS again (test_bio_membuf: Use fork) - Use OpenSSL_version_num() instead of unrealiable parsing of .h file. - Mitigate the Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657) - Add functionality to extract EC key from public key + Update tests - Worked around compatibility issues with OpenSSL 3.* - Support for Twisted has been deprecated (they have their own SSL support anyway). - Generate TAP while testing. - Stop using GitHub for testing. - Accept a small deviation from time in the testsuite (for systems with non-standard HZ kernel parameter). - Use the default BIO.__del__ rather tha overriding in BIO.File (avoid a memleak). - Resolve "X509_Name.as_der() method from X509.py -> class X509_Name caused segmentation fault" - Remove upstreamed patches: - CVE-2020-25657-Bleichenbacher-attack.patch - m2crypto-0.38-ossl3-tests.patch - openssl-adapt-tests-for-3.1.0.patch - openssl-stop-parsing-header.patch - timeout_300hz.patch - add timeout_300hz.patch to accept a small deviation from time in the testsuite (bsc#1212757) ==== python-cryptography ==== Version update (41.0.1 -> 41.0.2) - update to 41.0.2: * Fixed bugs in creating and parsing SSH certificates where critical options with values were handled incorrectly. Certificates are now created correctly and parsing accepts correct values as well as the previously generated invalid forms with a warning. In the next release, support for parsing these invalid forms will be removed. - remove patch remove_python_3_6_deprecation_warning.patch as the warning was already removed upstream - Add no-pytest_benchmark.patch, which remove dependency on pytest-benchmark and coveralls (We don't need no benchmarking and coverage measurement; bsc#1213005). ==== python-rich ==== Version update (13.4.1 -> 13.4.2) - specfile: * update copyright year - update to version 13.4.2: * Changed + Relaxed markdown-it-py dependency ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Add patch to make qmlimportscanner usable with qml-autoreqprov again (QTBUG-115170): * 0001-qmlimportscanner-Include-module-versions-again.patch ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 util-linux-lang - No longer provide last and lastb on Tumbleweed. last is provided by wtmpdb and lastb is no longer supported. ==== util-linux-systemd ==== - No longer provide last and lastb on Tumbleweed. last is provided by wtmpdb and lastb is no longer supported. ==== vim ==== Subpackages: vim-data vim-data-common xxd - Use app icon generated from vimlogo.eps in source tarball; add higher res icons of sizes 128, 256, and 512px as png sources. Our current icons deviate from upstream flatpaks for example. ==== virtualbox ==== - Fix builds on kernel 6.4 (boo#1212761) File "fixes_for_kernel_6.4.patch" added. ==== virtualbox-kmp ==== Version update (7.0.8_k6.3.9_1 -> 7.0.8_k6.4.2_1) - Fix builds on kernel 6.4 (boo#1212761) File "fixes_for_kernel_6.4.patch" added. ==== wtmpdb ==== Version update (0.7.0 -> 0.7.1) Subpackages: libwtmpdb0 - https://en.opensuse.org/SourceUrls - Use noun phrase for Summary. - Wrap descriptions at 70 (for yast2 textmode). - Update to ersion 0.7.1 - wtmpdb last: Support "YYYY-MM-DD", "today" and "yesterday" as time option - Add last compat symlink and manual page ==== yast2-installation ==== Version update (4.6.4 -> 4.6.5) - Fixed yupdate script to properly run pre/post scripts when patching from GitHub (bsc#1213197) - 4.6.5 ==== yast2-storage-ng ==== Version update (4.6.11 -> 4.6.12) - Ensure adding storage support software packages for MicroOS which uses its custom partitions_proposal client, not the standard inst_disk_proposal client (bsc#1212452) https://github.com/yast/yast-storage-ng/pull/1351 - 4.6.12 - Honor encryption settings if they are set into ProductFeatures by the Common Critera role (jsc#PED-4166, jsc#PED-4474). ==== yast2-trans ==== Version update (84.87.20230630.ccfa6add46 -> 84.87.20230708.d1de37aed1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230708.d1de37aed1: * Translated using Weblate (Chinese (China) (zh_CN)) * Translated using Weblate (Kurdish)

1 0

The lockdown function be enabled in master branch of openSUSE kernel
by joeyli 12 Jul '23

12 Jul '23

Hi folks, After testing NVIDIA kmp with lockdown kernel, the lockdown function be enabled in master branch of openSUSE Tumbleweed kernel again. (SLE and Leap kernels are already enabled) The following patches are unmartked: patches.suse/0001-security-lockdown-expose-a-hook-to-lock-the-kernel-down.patch patches.suse/0002-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-boot-mode.patch patches.suse/0003-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mode.patch patches.suse/0004-efi-Lock-down-the-kernel-at-the-integrity-level-if-b.patch patches.suse/arm64-lock-down-kernel-in-secure-boot-mode.patch The following config be enabled. It will load MOK (machine owner key) to kernel keyring: CONFIG_IMA_ARCH_POLICY=y CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT=y The following downstream config be enabled on x86_64 and aarch64. It will connect lockdown function with secure boot option in EFI firmware: CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y Kernel will set to integrity lockdown mode when secure boot be enabled: linux/security.h enum lockdown_reason { LOCKDOWN_NONE, LOCKDOWN_MODULE_SIGNATURE, // kernel module verification LOCKDOWN_DEV_MEM, LOCKDOWN_EFI_TEST, LOCKDOWN_KEXEC, LOCKDOWN_HIBERNATION, LOCKDOWN_PCI_ACCESS, LOCKDOWN_IOPORT, LOCKDOWN_MSR, LOCKDOWN_ACPI_TABLES, LOCKDOWN_DEVICE_TREE, LOCKDOWN_PCMCIA_CIS, LOCKDOWN_TIOCSSERIAL, LOCKDOWN_MODULE_PARAMETERS, LOCKDOWN_MMIOTRACE, LOCKDOWN_DEBUGFS, // restricted debugfs LOCKDOWN_XMON_WR, LOCKDOWN_BPF_WRITE_USER, // BPF write LOCKDOWN_DBG_WRITE_KERNEL, LOCKDOWN_RTAS_ERROR_INJECTION, LOCKDOWN_INTEGRITY_MAX, // integrity mode LOCKDOWN_KCORE, LOCKDOWN_KPROBES, LOCKDOWN_BPF_READ_KERNEL, // BPF read LOCKDOWN_DBG_READ_KERNEL, LOCKDOWN_PERF, LOCKDOWN_TRACEFS, LOCKDOWN_XMON_RW, LOCKDOWN_XFRM_SECRET, LOCKDOWN_CONFIDENTIALITY_MAX, // confidentiality mode }; As you see, the kernel module verification will be enabled. So please sign your self-built kernel module. You can reference this section in openSUSE UEFI wiki page: https://en.opensuse.org/openSUSE:UEFI#Signing_kernel_module_for_verification Please enroll your key to MOK by mokutil. If you didn't use shim, e.g. systemd-boot/dracut solution. I have created a bug bsc#1211224. Currently we do not support it with secure boot. Let's discuss it in bsc#1211224. Regards Joey Lee

13 54

Maintaining mediainfo
by Luigi Baldoni 12 Jul '23

12 Jul '23

Hello, I have another couple of packages that could use some love: multimedia:libs/libmediainfo and multimedia:apps/mediainfo. If nobody is willing to take up the slack, perhaps the packages created by the developer in home:MediaArea_net might be used instead. Regards

1 0

tumbleweed missing libs/packages for ppc64le?
by Collin C 12 Jul '23

12 Jul '23

I understand the PPC builds of leap and tumbleweed are mostly intended for big iron/enterprise servers. However with the advent of raptorcs and their "blackbird" and "talos" motherboards and availability of POWER9 cpus to the general public there are home desktop users now (like me) Tumbleweed doesnt seem to include any web browsers at all, and is also missing some essential libraries I need for compiling or running software. Leap didn't have this issue, but I would have a lot of headaches with some of its deprecated packages when compiling software for this arch (ppc64le) so I went ahead and upgraded to tumbleweed. I much prefer SUSEs ease of use over fedora, so i'm curious why even a web browser(firefox) is not available from repos for tumbleweed ppc64le.

2 1

New Tumbleweed snapshot 20230710 released!
by Dominique Leuenberger 11 Jul '23

11 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: oath-toolkit (2.6.7 -> 2.6.8) === Details === ==== oath-toolkit ==== Version update (2.6.7 -> 2.6.8) - Update to version 2.6.8 * libpskc: Fixes for recent libxmlsec releases. * pam_oath: Provide fallback pam_modutil_getpwnam implementation. * pam_oath: Don't fail authentication when pam_modutil_getpwnam doesn't ** know the user when usersfile don't include ${USER} or ${HOME}. * pam_oath: Self-test improvements.

1 0

New Tumbleweed snapshot 20230709 released!
by Dominique Leuenberger 10 Jul '23

10 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: attica-qt5 (5.107.0 -> 5.108.0) baloo5 (5.107.0 -> 5.108.0) bluez-qt (5.107.0 -> 5.108.0) breeze5-icons (5.107.0 -> 5.108.0) frameworkintegration (5.107.0 -> 5.108.0) kactivities-stats (5.107.0 -> 5.108.0) kactivities5 (5.107.0 -> 5.108.0) karchive (5.107.0 -> 5.108.0) kauth (5.107.0 -> 5.108.0) kbookmarks (5.107.0 -> 5.108.0) kcalendarcore (5.107.0 -> 5.108.0) kcmutils (5.107.0 -> 5.108.0) kcodecs (5.107.0 -> 5.108.0) kcompletion (5.107.0 -> 5.108.0) kconfig (5.107.0 -> 5.108.0) kconfigwidgets (5.107.0 -> 5.108.0) kcontacts (5.107.0 -> 5.108.0) kcoreaddons (5.107.0 -> 5.108.0) kcrash (5.107.0 -> 5.108.0) kdav (5.107.0 -> 5.108.0) kdbusaddons (5.107.0 -> 5.108.0) kdeclarative (5.107.0 -> 5.108.0) kded (5.107.0 -> 5.108.0) kdelibs4support (5.107.0 -> 5.108.0) kdesu (5.107.0 -> 5.108.0) kdnssd-framework (5.107.0 -> 5.108.0) kdoctools (5.107.0 -> 5.108.0) kfilemetadata5 (5.107.0 -> 5.108.0) kglobalaccel (5.107.0 -> 5.108.0) kguiaddons (5.107.0 -> 5.108.0) kholidays (5.107.0 -> 5.108.0) khtml (5.107.0 -> 5.108.0) ki18n (5.107.0 -> 5.108.0) kiconthemes (5.107.0 -> 5.108.0) kidletime (5.107.0 -> 5.108.0) kimageformats (5.107.0 -> 5.108.0) kinit (5.107.0 -> 5.108.0) kio (5.107.0 -> 5.108.0) kirigami2 (5.107.0 -> 5.108.0) kitemmodels (5.107.0 -> 5.108.0) kitemviews (5.107.0 -> 5.108.0) kjobwidgets (5.107.0 -> 5.108.0) kjs (5.107.0 -> 5.108.0) knewstuff (5.107.0 -> 5.108.0) knotifications (5.107.0 -> 5.108.0) knotifyconfig (5.107.0 -> 5.108.0) kpackage (5.107.0 -> 5.108.0) kparts (5.107.0 -> 5.108.0) kpeople5 (5.107.0 -> 5.108.0) kplotting (5.107.0 -> 5.108.0) kpty (5.107.0 -> 5.108.0) kquickcharts (5.107.0 -> 5.108.0) kross (5.107.0 -> 5.108.0) krunner (5.107.0 -> 5.108.0) kservice (5.107.0 -> 5.108.0) ktexteditor (5.107.0 -> 5.108.0) ktextwidgets (5.107.0 -> 5.108.0) kunitconversion (5.107.0 -> 5.108.0) kwallet (5.107.0 -> 5.108.0) kwayland (5.107.0 -> 5.108.0) kwidgetsaddons (5.107.0 -> 5.108.0) kwindowsystem (5.107.0 -> 5.108.0) kxmlgui (5.107.0 -> 5.108.0) libKF5ModemManagerQt (5.107.0 -> 5.108.0) libKF5NetworkManagerQt (5.107.0 -> 5.108.0) libqt5-qtbase plasma-framework (5.107.0 -> 5.108.0) prison-qt5 (5.107.0 -> 5.108.0) purpose (5.107.0 -> 5.108.0) qqc2-desktop-style (5.107.0 -> 5.108.0) solid (5.107.0 -> 5.108.0) sonnet (5.107.0 -> 5.108.0) syndication (5.107.0 -> 5.108.0) syntax-highlighting (5.107.0 -> 5.108.0) threadweaver (5.107.0 -> 5.108.0) xen (4.17.1_04 -> 4.17.1_06) === Details === ==== attica-qt5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Attica5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== baloo5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: baloo5-file baloo5-file-lang baloo5-imports baloo5-kioslaves baloo5-kioslaves-lang baloo5-tools baloo5-tools-lang libKF5Baloo5 libKF5BalooEngine5 libKF5BalooEngine5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * [Document] Fix parameter name for setParentId * [WriteTransaction] Avoid false warning when removing empty xattr terms * [DocumentUrlDB] Remove recursive removal of parent directories * [AdvancedQueryParser] Correctly parse empty quoted strings * [AdvancedQueryParser] Fix minor error in test case * Remove qt6 CI builds * [UnindexedFileIndexer] Split into multiple transactions * [FirstRunIndexer] Split initial index run into multiple transactions * Move basic indexing test/benchmark to autotests * [BasicIndexingTest] Add options for transaction size and index dir * [WriteIoTest] Set required parent id * Minor fixes for manual tests * Fix signedness mismatch compiler warning * Fix compiler warning by using an STL-style iterator instead * Remove redundant transactiontest * [UnindexedFileIndexer] Skip document when BasicIndexingJob fails * [Transaction] Allow to fully reset the transaction state * [WriteTransactionTest] Use unique_ptr for DB and temp dir * [Transaction] Use unique_ptr for write transaction * Verify parentId when adding documents * [DatabaseDbis] Use default member initializers instead of constructor * Remove unused QMimeDatabase instance from UnindexedFileIndexer ==== bluez-qt ==== Version update (5.107.0 -> 5.108.0) Subpackages: bluez-qt-imports bluez-qt-udev libKF5BluezQt6 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== breeze5-icons ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Export cmake config so that a app can ensure that breeze-icons is installed * Remove qt6 CI builds ==== frameworkintegration ==== Version update (5.107.0 -> 5.108.0) Subpackages: frameworkintegration-plugin libKF5Style5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kactivities-stats ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kactivities5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: kactivities5-imports libKF5Activities5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== karchive ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Archive5 libKF5Archive5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Don't create subdirectory in toplevel. * Remove qt6 CI builds ==== kauth ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Auth5 libKF5Auth5-lang libKF5AuthCore5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kbookmarks ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Bookmarks5 libKF5Bookmarks5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcalendarcore ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcmutils ==== Version update (5.107.0 -> 5.108.0) Subpackages: kcmutils-imports libKF5KCMUtils5 libKF5KCMUtils5-lang libKF5KCMUtilsCore5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcodecs ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Codecs5 libKF5Codecs5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcompletion ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Completion5 libKF5Completion5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kconfig ==== Version update (5.107.0 -> 5.108.0) Subpackages: kconf_update5 libKF5ConfigCore5 libKF5ConfigCore5-lang libKF5ConfigGui5 libKF5ConfigQml5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kconfigwidgets ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5ConfigWidgets5 libKF5ConfigWidgets5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcontacts ==== Version update (5.107.0 -> 5.108.0) Subpackages: kcontacts-lang libKF5Contacts5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcoreaddons ==== Version update (5.107.0 -> 5.108.0) Subpackages: kcoreaddons-lang libKF5CoreAddons5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kcrash ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdav ==== Version update (5.107.0 -> 5.108.0) Subpackages: kdav-lang libKF5DAV5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdbusaddons ==== Version update (5.107.0 -> 5.108.0) Subpackages: kdbusaddons-tools libKF5DBusAddons5 libKF5DBusAddons5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdeclarative ==== Version update (5.107.0 -> 5.108.0) Subpackages: kdeclarative-components libKF5CalendarEvents5 libKF5Declarative5 libKF5Declarative5-lang libKF5QuickAddons5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kded ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdelibs4support ==== Version update (5.107.0 -> 5.108.0) Subpackages: kdelibs4support-lang libKF5KDELibs4Support5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - No code change since 5.107.0 ==== kdesu ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Su5 libKF5Su5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdnssd-framework ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5DNSSD5 libKF5DNSSD5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kdoctools ==== Version update (5.107.0 -> 5.108.0) Subpackages: kdoctools-lang libKF5DocTools5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * doc: use a more generic Frameworks entity in the example ==== kfilemetadata5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: kfilemetadata5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Reapply ReplayGain changes ==== kglobalaccel ==== Version update (5.107.0 -> 5.108.0) Subpackages: kglobalaccel5 libKF5GlobalAccel5 libKF5GlobalAccel5-lang libKF5GlobalAccelPrivate5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kguiaddons ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5GuiAddons5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Add an option to disable building the geo: URI scheme handler ==== kholidays ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Holidays5 libKF5Holidays5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Add juneteenth as variable holiday * Remove qt6 CI builds ==== khtml ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5KHtml5 libKF5KHtml5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - No code change since 5.107.0 ==== ki18n ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5I18n5 libKF5I18n5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kiconthemes ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5IconThemes5 libKF5IconThemes5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kidletime ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kimageformats ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * jxl: add support for libjxl v0.9, drop support for old 0.6.1 * Remove qt6 CI builds ==== kinit ==== Version update (5.107.0 -> 5.108.0) Subpackages: kinit-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - No code change since 5.107.0 ==== kio ==== Version update (5.107.0 -> 5.108.0) Subpackages: kio-core kio-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * KUrlRequester: restore unnamed filter compatibility with Plasma file dialog * KUrlRequester::setFilter: note syntax change in compiler deprecation warning * Add KUrlRequester::nameFilters, deprecate KUrlRequester::filter (kde#369542) * KUrlRequester::setFilter: note special filter syntax, allow unnamed filters * KCoreDirLister::nameFilter: revert to non-partial matching again * filewidgets/kfilewidget: Select and focus filename after canceling overwrite (kde#444515) * [previewjob] Check whether thumbRootDevice is valid before access (kde#470845) - Drop patch, merged upstream: * 0001-previewjob-Check-whether-thumbRootDevice-is-valid-be.patch ==== kirigami2 ==== Version update (5.107.0 -> 5.108.0) Subpackages: kirigami2-lang libKF5Kirigami2-5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * PassiveNotificationsManager: Fix callBack lifetime (kde#470786) * Backport fix to the template from master * Use MobileForm.AboutPage * Improve default template * BasicListItem: Use pressed state for tooltip * Port i18n to qsTr * DefautListItemBackground: prioritize user input events when setting background color * Fix tst_basiclistitem_tooltip autotest ==== kitemmodels ==== Version update (5.107.0 -> 5.108.0) Subpackages: kitemmodels-imports libKF5ItemModels5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kitemviews ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5ItemViews5 libKF5ItemViews5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kjobwidgets ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5JobWidgets5 libKF5JobWidgets5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kjs ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5JS5 libKF5JSApi5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - No code change since 5.107.0 ==== knewstuff ==== Version update (5.107.0 -> 5.108.0) Subpackages: knewstuff-imports libKF5NewStuff5 libKF5NewStuff5-lang libKF5NewStuffCore5 libKF5NewStuffWidgets5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== knotifications ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Notifications5 libKF5Notifications5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== knotifyconfig ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5NotifyConfig5 libKF5NotifyConfig5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kpackage ==== Version update (5.107.0 -> 5.108.0) Subpackages: kpackage-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Define json-validate-ignore property in .kde-ci.yml ==== kparts ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Parts5 libKF5Parts5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kpeople5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: kpeople5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kplotting ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kpty ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Pty5 libKF5Pty5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kquickcharts ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kross ==== Version update (5.107.0 -> 5.108.0) Subpackages: kross-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - No code change since 5.107.0 ==== krunner ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kservice ==== Version update (5.107.0 -> 5.108.0) Subpackages: kservice-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== ktexteditor ==== Version update (5.107.0 -> 5.108.0) Subpackages: ktexteditor-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== ktextwidgets ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5TextWidgets5 libKF5TextWidgets5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kunitconversion ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5UnitConversion5 libKF5UnitConversion5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kwallet ==== Version update (5.107.0 -> 5.108.0) Subpackages: kwallet-tools kwallet-tools-lang kwalletd5 kwalletd5-lang libKF5Wallet5 libkwalletbackend5-5 - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kwayland ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kwidgetsaddons ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5WidgetsAddons5 libKF5WidgetsAddons5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Remove duplicate row in category selection ==== kwindowsystem ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5WindowSystem5 libKF5WindowSystem5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== kxmlgui ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5XmlGui5 libKF5XmlGui5-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Add a view_redisplay_merge MergeLocal to ui_standards.rc (kde#470848) ==== libKF5ModemManagerQt ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== libKF5NetworkManagerQt ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Include only needed headers instead of QtDBus module header ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-mysql libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075) ==== plasma-framework ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Plasma5 plasma-framework-components plasma-framework-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * Polish DropMenu before creating platform window ==== prison-qt5 ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Prison5 prison-qt5-imports - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== purpose ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Purpose5 libKF5PurposeWidgets5 purpose-lang - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== qqc2-desktop-style ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== solid ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5Solid5 libKF5Solid5-lang solid-imports solid-tools - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== sonnet ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5SonnetCore5 libKF5SonnetCore5-lang libKF5SonnetUi5 sonnet-imports - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== syndication ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== syntax-highlighting ==== Version update (5.107.0 -> 5.108.0) Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang syntax-highlighting-imports - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds * ensure all .json files are valid * Highlight QML pragma keyword ==== threadweaver ==== Version update (5.107.0 -> 5.108.0) - Update to 5.108.0 * New feature release * For more details please see: * https://kde.org/announcements/frameworks/5/5.108.0 - Changes since 5.107.0: * Remove qt6 CI builds ==== xen ==== Version update (4.17.1_04 -> 4.17.1_06) Subpackages: xen-libs xen-tools xen-tools-domU - Upstream bug fixes (bsc#1027519) 645dec48-AMD-IOMMU-assert-boolean-enum.patch 646b782b-PCI-pci_get_pdev-respect-segment.patch 647dfb0e-x86-missing-unlock-in-microcode_update_helper.patch 648863fc-AMD-IOMMU-Invalidate-All-check.patch

1 0

Switching from console back to X (ALT+F7) not working properly recently?
by Johannes Kastl 10 Jul '23

10 Jul '23

Hi all, I just noticed that switching from the GUI to a console (CTRL+ALT+Number) works, but switching back to the GUI (X-Session) is not working. It seems I have to use ALT+F7 and then use STRG+ALT+Number (as if I want to switch to another console), which instead takes me back to the GUI. Anyone else having this? Two laptops with recent (June) snapshots installed, both using KDE/Plasma with X. Both showing this issue. Kind Regards, Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl(a)b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg http://www.b1-systems.de GF: Ralph Dehner Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537

9 11

Feedback
by Leandro Almeida 10 Jul '23

10 Jul '23

Hello, leaving feedback on Opensuse Tumbleweed. 1 - The internet is more stable on tumbleweed. It only turned off once after many hours of use. 2 - I'm using Chromium, which opensuse distributes in the store. I couldn't install google chrome, it gave an error in the authentication key, in yast. I'm going to use chromium anyway, and a great browser, and Opensuse even packs 😃 Some videos on youtube and lives are failing, it is not possible to play. I believe that free and non free codecs are missing, some support or something like that in the browser. Videos at 720p60fps, 1080p60fps, 2k60fps, 4k60fps, 8k60fps, fail a lot, I believe it's because of hardware and gpu acceleration, codecs, drivers etc 3 - In the repositories that appear in the discover settings, the repository that comes with the pen drive used to format it is not automatically deleted. The system leaves it enabled, with the permanent date of the file used to format. 4 - Thanks, 😃 laptop 8gb ram intel uhd 600 i915 geminilake glk2 intel celeron n4000 (2) 2.60ghz ssd 256gb abnt2 ptbr utf8

6 11

Feedback
by Leandro Almeida 10 Jul '23

10 Jul '23

Hello, I wanted to suggest Opensuse to increase support for steam play, proton. To run the games perfectly 😅. I saw something on the internet about vm.max_map_count with a value of 2147483642 (MAX_INT – 5) to run steam play well, experimental proton. But that I don't understand, I don't want to break the system either 😅. The opensuse linux is a good linux, I'm using it as my main distro, with secure boot and other security parameters enabled. opensuse tumbleweed Kde plasma, wayland Thanks, 😅

1 0

New Tumbleweed snapshot 20230708 released!
by Dominique Leuenberger 09 Jul '23

09 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (115.0 -> 115.0.1) inih (56 -> 57) okteta (0.26.11 -> 0.26.12) qt6-base qt6-declarative qt6-wayland === Details === ==== MozillaFirefox ==== Version update (115.0 -> 115.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 115.0.1 * fixes for other platforms ==== inih ==== Version update (56 -> 57) - Update to version 57 * Added a GetUnsigned function for getting unsigned values. * Added GetInteger64 and GetUnsigned64 to read 64-bit integers. ==== okteta ==== Version update (0.26.11 -> 0.26.12) Subpackages: libKasten4 libOkteta3 libkasten-lang libokteta-lang okteta-data - Update to 0.26.12 * Improved: translations * Improved: Structures tool: show char arrays as string with the type entry * Fixed: Exporting: no more duplicated overwrite confirmation dialog * Fixed: Saving: no more duplicated overwrite confirmation dialog ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Update subpackages requirements - Replace 0001-Require-GCC-10.patch with 0001-Require-GCC-12.patch ==== qt6-declarative ==== Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports - Update subpackages requirements ==== qt6-wayland ==== Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update subpackages requirements

1 0

[IMPORTANT] Switching from wtmp to wtmpdb
by Thorsten Kukuk 09 Jul '23

09 Jul '23

Hi, as already told ;), wtmp has a Y2038 problem which the glibc developers don't plan to fix, but instead they want deprecate that API. (For background see https://www.thkukuk.de/blog/Y2038_glibc_wtmp_64bit/) On openSUSE Tumbleweed/MicroOS/... we introduced meanwhile wtmpdb, which solves the Y2038 problem and some others, too. "wtmpdb last" should work already today and show you similar output compared with "last" itself. The next and final step will be, making "last" a link to "wtmpdb last" and rename the old last to "last.legacy". There are currently no plans to disable writing of wtmp entries completly, I expect that this will come most likely together with utmp. So the applications reading wtmp directly (currently I'm only aware of accounts-daemon, maybe samba, haven't analyzed that code yet) should continue to work. The other 99% of applications accessing wtmp do only create new entries, this should cause no issues. But: due to a one year old bug in systemd-presets-common-SUSE, the service files didn't got always enabled. IMPORTANT: please check that the wtmpdb-update-boot.service and wtmpdb-rotate.timer are enabled, if not, please enable them: systemctl enable --now wtmpdb-update-boot.service systemctl enable wtmpdb-rotate.timer This is only necessary if you did updates, not for systems which got fresh installed this week. Thanks, Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)

14 32

Question to the devs on the way grub is used in live isos
by Adam Vodopjan 08 Jul '23

08 Jul '23

I've just downloaded a fresh tumbleweed iso, namely openSUSE-Tumbleweed-KDE-Live-x86_64-Snapshot20230705-Media.iso Inside I see EFI/BOOT/grub.cfg with such lines: set btrfs_relative_path="yes" search --file --set=root /boot/mbrid set prefix=($root)/boot/grub2 configfile ($root)/boot/grub2/grub.cfg THE QUESTION IS: Why does it use 'configfile' instead of 'source' there? There is a confusing side effect this way. Spin the iso up in a EFI system, wait for the grub menu to appear and press Esc. See the grub shell screen? That's game over: you're at the top level grub screen, there is nowhere to return with Esc like you'd do with a generic grub shell started with the 'c' shortcut. Now spin the same iso up in a PC (non-EFI) system, wait for the menu and press Esc. Nothing bad happens. So there are 2 problems: 1. User experience differs in EFI/non-EFI cases 2. In EFI case an accidental Esc results in a dead-end Also I downloaded a fresh tumbleweed install iso, namely openSUSE-Tumbleweed-DVD-x86_64-Snapshot20230705-Media.iso, and created a fresh system with it (the iso itseft is good, EFI/BOOT/grub.cfg is self-contained). In the installed system EFI/BOOT/grub.cfg does 'source', not 'configfile'. Also in /sbin/shim-install I see 'source' as well: 428 cat <<EOF 429 search --fs-uuid --set=root ${cfg_fs_uuid} 430 set prefix=(\${root})`${grub_mkrelpath} ${grub_cfg_dirname}` 431 source "\${prefix}/${grub_cfg_basename}" 432 EOF

2 2

New Tumbleweed snapshot 20230707 released!
by Dominique Leuenberger 08 Jul '23

08 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: akonadi-calendar (23.04.2 -> 23.04.3) akonadi-calendar-tools (23.04.2 -> 23.04.3) akonadi-contact (23.04.2 -> 23.04.3) akonadi-import-wizard (23.04.2 -> 23.04.3) akonadi-mime (23.04.2 -> 23.04.3) akonadi-notes (23.04.2 -> 23.04.3) akonadi-search (23.04.2 -> 23.04.3) akonadi-server (23.04.2 -> 23.04.3) akregator (23.04.2 -> 23.04.3) analitza (23.04.2 -> 23.04.3) ark (23.04.2 -> 23.04.3) baloo5-widgets (23.04.2 -> 23.04.3) bind blinken (23.04.2 -> 23.04.3) calendarsupport (23.04.2 -> 23.04.3) dolphin (23.04.2 -> 23.04.3) eventviews (23.04.2 -> 23.04.3) ffmpegthumbs (23.04.2 -> 23.04.3) filelight (23.04.2 -> 23.04.3) grantleetheme (23.04.2 -> 23.04.3) gwenview5 (23.04.2 -> 23.04.3) incidenceeditor (23.04.2 -> 23.04.3) kaccounts-integration (23.04.2 -> 23.04.3) kaccounts-providers (23.04.2 -> 23.04.3) kaddressbook (23.04.2 -> 23.04.3) kalgebra (23.04.2 -> 23.04.3) kamera (23.04.2 -> 23.04.3) kanagram (23.04.2 -> 23.04.3) kapptemplate (23.04.2 -> 23.04.3) kate (23.04.2 -> 23.04.3) kbruch (23.04.2 -> 23.04.3) kcachegrind (23.04.2 -> 23.04.3) kcalc (23.04.2 -> 23.04.3) kcalutils (23.04.2 -> 23.04.3) kcharselect (23.04.2 -> 23.04.3) kcolorchooser (23.04.2 -> 23.04.3) kde-print-manager (23.04.2 -> 23.04.3) kdeconnect-kde (23.04.2 -> 23.04.3) kdeedu-data (23.04.2 -> 23.04.3) kdegraphics-thumbnailers (23.04.2 -> 23.04.3) kdenetwork-filesharing (23.04.2 -> 23.04.3) kdepim-addons (23.04.2 -> 23.04.3) kdepim-runtime (23.04.2 -> 23.04.3) kdevelop5 (23.04.2 -> 23.04.3) kdialog (23.04.2 -> 23.04.3) kgeography (23.04.2 -> 23.04.3) khangman (23.04.2 -> 23.04.3) khelpcenter5 (23.04.2 -> 23.04.3) kidentitymanagement (23.04.2 -> 23.04.3) kig (23.04.2 -> 23.04.3) kimap (23.04.2 -> 23.04.3) kio-extras5 (23.04.2 -> 23.04.3) kio_audiocd (23.04.2 -> 23.04.3) kipi-plugins (23.04.2 -> 23.04.3) kiten (23.04.2 -> 23.04.3) kitinerary (23.04.2 -> 23.04.3) kldap (23.04.2 -> 23.04.3) kleopatra (23.04.2 -> 23.04.3) kmag (23.04.2 -> 23.04.3) kmahjongg (23.04.2 -> 23.04.3) kmail (23.04.2 -> 23.04.3) kmail-account-wizard (23.04.2 -> 23.04.3) kmailtransport (23.04.2 -> 23.04.3) kmbox (23.04.2 -> 23.04.3) kmime (23.04.2 -> 23.04.3) kmines (23.04.2 -> 23.04.3) kmousetool (23.04.2 -> 23.04.3) kmplot (23.04.2 -> 23.04.3) knotes (23.04.2 -> 23.04.3) kompare (23.04.2 -> 23.04.3) konsole (23.04.2 -> 23.04.3) kontact (23.04.2 -> 23.04.3) kontactinterface (23.04.2 -> 23.04.3) konversation (23.04.2 -> 23.04.3) korganizer (23.04.2 -> 23.04.3) kpat (23.04.2 -> 23.04.3) kpimtextedit (23.04.2 -> 23.04.3) kpkpass (23.04.2 -> 23.04.3) kqtquickcharts (23.04.2 -> 23.04.3) kreversi (23.04.2 -> 23.04.3) ksanecore (23.04.2 -> 23.04.3) ksmtp (23.04.2 -> 23.04.3) ksudoku (23.04.2 -> 23.04.3) ktnef (23.04.2 -> 23.04.3) ktouch (23.04.2 -> 23.04.3) kwalletmanager5 (23.04.2 -> 23.04.3) kwordquiz (23.04.2 -> 23.04.3) libgravatar (23.04.2 -> 23.04.3) libkcddb (23.04.2 -> 23.04.3) libkcompactdisc (23.04.2 -> 23.04.3) libkdcraw (23.04.2 -> 23.04.3) libkdegames (23.04.2 -> 23.04.3) libkdepim (23.04.2 -> 23.04.3) libkeduvocdocument (23.04.2 -> 23.04.3) libkexiv2 (23.04.2 -> 23.04.3) libkgapi (23.04.2 -> 23.04.3) libkipi (23.04.2 -> 23.04.3) libkleo (23.04.2 -> 23.04.3) libkmahjongg (23.04.2 -> 23.04.3) libkomparediff2 (23.04.2 -> 23.04.3) libksane (23.04.2 -> 23.04.3) libksieve (23.04.2 -> 23.04.3) libstorage-ng (4.5.121 -> 4.5.122) lokalize (23.04.2 -> 23.04.3) mailcommon (23.04.2 -> 23.04.3) mailimporter (23.04.2 -> 23.04.3) mbox-importer (23.04.2 -> 23.04.3) messagelib (23.04.2 -> 23.04.3) mobipocket (23.04.2 -> 23.04.3) okular (23.04.2 -> 23.04.3) parley (23.04.2 -> 23.04.3) pim-data-exporter (23.04.2 -> 23.04.3) pim-sieve-editor (23.04.2 -> 23.04.3) pimcommon (23.04.2 -> 23.04.3) signon-kwallet-extension (23.04.2 -> 23.04.3) skanlite (23.04.2 -> 23.04.3) spectacle (23.04.2 -> 23.04.3) step (23.04.2 -> 23.04.3) umbrello (23.04.2 -> 23.04.3) === Details === ==== akonadi-calendar ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-plugin-calendar kalendarac libKPim5AkonadiCalendar5 libKPim5AkonadiCalendar5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-calendar-tools ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-calendar-tools-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-contact ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-contact-lang akonadi-plugin-contacts libKPim5AkonadiContact5 libKPim5ContactEditor5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-import-wizard ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-import-wizard-lang libKPim5ImportWizard5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-mime ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-plugin-mime libKPim5AkonadiMime5 libKPim5AkonadiMime5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-notes ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5AkonadiNotes5 libKPim5AkonadiNotes5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-search ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-search-lang libKPim5AkonadiSearch5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akonadi-server ==== Version update (23.04.2 -> 23.04.3) Subpackages: akonadi-server-lang libKPim5AkonadiAgentBase5 libKPim5AkonadiCore5 libKPim5AkonadiPrivate5 libKPim5AkonadiWidgets5 libKPim5AkonadiXml5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== akregator ==== Version update (23.04.2 -> 23.04.3) Subpackages: akregator-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== analitza ==== Version update (23.04.2 -> 23.04.3) Subpackages: analitza-lang libAnalitza8 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== ark ==== Version update (23.04.2 -> 23.04.3) Subpackages: ark-lang libkerfuffle23 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== baloo5-widgets ==== Version update (23.04.2 -> 23.04.3) Subpackages: baloo5-widgets-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== bind ==== Subpackages: bind-doc bind-utils - rebuild bind-utils on libuv updates (bsc#1212090) ==== blinken ==== Version update (23.04.2 -> 23.04.3) Subpackages: blinken-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== calendarsupport ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5CalendarSupport5 libKPim5CalendarSupport5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== dolphin ==== Version update (23.04.2 -> 23.04.3) Subpackages: dolphin-part dolphin-part-lang dolphin-zsh-completion libdolphinvcs5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== eventviews ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5EventViews5 libKPim5EventViews5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Invalidate model to apply sortCompletedTodosSeparately pref (kde#458254) ==== ffmpegthumbs ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== filelight ==== Version update (23.04.2 -> 23.04.3) Subpackages: filelight-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== grantleetheme ==== Version update (23.04.2 -> 23.04.3) Subpackages: grantleetheme-lang libKPim5GrantleeTheme5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== gwenview5 ==== Version update (23.04.2 -> 23.04.3) Subpackages: gwenview5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Pass exivData as argument to avoid crash in exiv2 library (kde#470880) ==== incidenceeditor ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5IncidenceEditor5 libKPim5IncidenceEditor5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kaccounts-integration ==== Version update (23.04.2 -> 23.04.3) Subpackages: kaccounts-integration-lang libkaccounts2 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kaccounts-providers ==== Version update (23.04.2 -> 23.04.3) Subpackages: kaccounts-providers-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kaddressbook ==== Version update (23.04.2 -> 23.04.3) Subpackages: kaddressbook-doc kaddressbook-lang libKPim5AddressbookImportExport5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kalgebra ==== Version update (23.04.2 -> 23.04.3) Subpackages: kalgebra-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kamera ==== Version update (23.04.2 -> 23.04.3) Subpackages: kamera-lang kio_kamera - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kanagram ==== Version update (23.04.2 -> 23.04.3) Subpackages: kanagram-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Fix a minor bug Removing letters while a guess is being checked is no longer possible. ==== kapptemplate ==== Version update (23.04.2 -> 23.04.3) Subpackages: kapptemplate-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kate ==== Version update (23.04.2 -> 23.04.3) Subpackages: kate-lang kate-plugins - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Improve code action invocation with no selection * Fix LSP inlay hint deserialization * lsp: Use label as insertText as a last resort ==== kbruch ==== Version update (23.04.2 -> 23.04.3) Subpackages: kbruch-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kcachegrind ==== Version update (23.04.2 -> 23.04.3) Subpackages: kcachegrind-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kcalc ==== Version update (23.04.2 -> 23.04.3) Subpackages: kcalc-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kcalutils ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kcharselect ==== Version update (23.04.2 -> 23.04.3) Subpackages: kcharselect-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kcolorchooser ==== Version update (23.04.2 -> 23.04.3) Subpackages: kcolorchooser-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kde-print-manager ==== Version update (23.04.2 -> 23.04.3) Subpackages: kde-print-manager-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdeconnect-kde ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Fix kdeconnect_open desktop file type (kde#424782) * Use explicit constructor for QSslCertificate with value initialized argument (kde#469428) ==== kdeedu-data ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdegraphics-thumbnailers ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdenetwork-filesharing ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdenetwork-filesharing-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdepim-addons ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdepim-addons-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdepim-runtime ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdepim-runtime-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdevelop5 ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdevelop5-lang kdevplatform kdevplatform-lang libkdevplatform511 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kdialog ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdialog-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kgeography ==== Version update (23.04.2 -> 23.04.3) Subpackages: kgeography-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== khangman ==== Version update (23.04.2 -> 23.04.3) Subpackages: khangman-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== khelpcenter5 ==== Version update (23.04.2 -> 23.04.3) Subpackages: khelpcenter5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kidentitymanagement ==== Version update (23.04.2 -> 23.04.3) Subpackages: kidentitymanagement-lang libKPim5IdentityManagement5 libKPim5IdentityManagementWidgets5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kig ==== Version update (23.04.2 -> 23.04.3) Subpackages: kig-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kimap ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5IMAP5 libKPim5IMAP5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kio-extras5 ==== Version update (23.04.2 -> 23.04.3) Subpackages: kio-extras5-lang libkioarchive5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kio_audiocd ==== Version update (23.04.2 -> 23.04.3) Subpackages: kio_audiocd-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kipi-plugins ==== Version update (23.04.2 -> 23.04.3) Subpackages: kipi-plugins-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kiten ==== Version update (23.04.2 -> 23.04.3) Subpackages: fonts-KanjiStrokeOrders kiten-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kitinerary ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5Itinerary5 libKPim5Itinerary5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Use a faster regex for matching Grimaldi Line passenger data * Add Color Line extractor script * Support onepagebooking PDFs as well * Expand the Fjord Line trigger expression to cover newer tickets * Treat any sequence of * characters as RCT2 empty marker * Accept also slightly larger ERA SSBv3 codes * Simplify Trenitalia extractor * Extract DJH membership card barcodes * Fix extraction of multi-page Trenitalia tickets * Improve handling of Flixbus train tickets * Add additional sanity checks for ERA SSBv2 tickets * Relax the SNCB barcode trigger pattern a bit ==== kldap ==== Version update (23.04.2 -> 23.04.3) Subpackages: kldap-lang libKPim5Ldap5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kleopatra ==== Version update (23.04.2 -> 23.04.3) Subpackages: kleopatra-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmag ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmag-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmahjongg ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmahjongg-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmail ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmail-application-icons kmail-lang ktnef - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Don't remove margins * Quote html chars in subject too * Remove unused QtDBus * kmsearchmessagemodel.cpp - Avoid crash for invalid Akonadi::Item * Allow to restore recent dir * Fix display email when we have < ... > ==== kmail-account-wizard ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmail-account-wizard-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmailtransport ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmailtransport-lang libKPim5MailTransport5 libKPim5MailTransportAkonadi5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmbox ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmime ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5Mime5 libKPim5Mime5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmines ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmines-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmousetool ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmousetool-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kmplot ==== Version update (23.04.2 -> 23.04.3) Subpackages: kmplot-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== knotes ==== Version update (23.04.2 -> 23.04.3) Subpackages: knotes-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kompare ==== Version update (23.04.2 -> 23.04.3) Subpackages: kompare-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== konsole ==== Version update (23.04.2 -> 23.04.3) Subpackages: konsole-part konsole-part-lang konsole-zsh-completion - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Tab bar settings: fix MIME type filtering of custom CSS file picker * Hides redundant widgets on dialog for emoji font selection (kde#469563) ==== kontact ==== Version update (23.04.2 -> 23.04.3) Subpackages: kontact-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kontactinterface ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5KontactInterface5 libKPim5KontactInterface5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== konversation ==== Version update (23.04.2 -> 23.04.3) Subpackages: konversation-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Highlights sounds file picker: fix setting file filter by MIME types (kde#433667) ==== korganizer ==== Version update (23.04.2 -> 23.04.3) Subpackages: korganizer-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kpat ==== Version update (23.04.2 -> 23.04.3) Subpackages: kpat-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Solve the simple simon autodrop problem less aggressively (kde#469991) * Reinit Golf solver correctly after switching games (kde#470166) ==== kpimtextedit ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5TextEdit5 libKPim5TextEdit5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Remove prefix ==== kpkpass ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kqtquickcharts ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kreversi ==== Version update (23.04.2 -> 23.04.3) Subpackages: kreversi-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * fix board position in portrait mode (kde#445131) ==== ksanecore ==== Version update (23.04.2 -> 23.04.3) Subpackages: ksanecore-lang libKSaneCore1 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== ksmtp ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5SMTP5 libKPim5SMTP5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== ksudoku ==== Version update (23.04.2 -> 23.04.3) Subpackages: ksudoku-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== ktnef ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5Tnef5 libKPim5Tnef5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== ktouch ==== Version update (23.04.2 -> 23.04.3) Subpackages: ktouch-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kwalletmanager5 ==== Version update (23.04.2 -> 23.04.3) Subpackages: kwalletmanager5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== kwordquiz ==== Version update (23.04.2 -> 23.04.3) Subpackages: kwordquiz-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libgravatar ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5Gravatar5 libKPim5Gravatar5-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkcddb ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5Cddb5 libkcddb-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkcompactdisc ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5CompactDisc5 libkcompactdisc-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkdcraw ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkdegames ==== Version update (23.04.2 -> 23.04.3) Subpackages: kdegames-carddecks-default libKF5KDEGames7 libkdegames-lang libkdegames-qt5-imports - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkdepim ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5Libkdepim5 libkdepim-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkeduvocdocument ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKEduVocDocument5 libkeduvocdocument-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkexiv2 ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkgapi ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5GAPICalendar5 libKPim5GAPICore5 libKPim5GAPIPeople5 libKPim5GAPITasks5 libkgapi-lang sasl2-kdexoauth2 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkipi ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5Kipi32_0_0 libkipi-data - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkleo ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5libkleo5 libkleo-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkmahjongg ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5KMahjongglib5 libkmahjongg-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libkomparediff2 ==== Version update (23.04.2 -> 23.04.3) Subpackages: libkomparediff2-5 libkomparediff2-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Add patch-level to version, also unbreaks KOMPAREDIFF2_VERSION C++ macro ==== libksane ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5Sane5 libksane-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libksieve ==== Version update (23.04.2 -> 23.04.3) Subpackages: libksieve-lang libksieve5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== libstorage-ng ==== Version update (4.5.121 -> 4.5.122) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#938 - prioritize activation of swap - 4.5.122 ==== lokalize ==== Version update (23.04.2 -> 23.04.3) Subpackages: lokalize-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - Changes since 23.04.2: * Ignore word wrapping newlines when creating message diffs ==== mailcommon ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5MailCommon5 mailcommon-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== mailimporter ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKPim5MailImporter5 libKPim5MailImporterAkonadi5 mailimporter-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== mbox-importer ==== Version update (23.04.2 -> 23.04.3) Subpackages: mbox-importer-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== messagelib ==== Version update (23.04.2 -> 23.04.3) Subpackages: messagelib-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== mobipocket ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== okular ==== Version update (23.04.2 -> 23.04.3) Subpackages: okular-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== parley ==== Version update (23.04.2 -> 23.04.3) Subpackages: parley-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== pim-data-exporter ==== Version update (23.04.2 -> 23.04.3) Subpackages: pim-data-exporter-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== pim-sieve-editor ==== Version update (23.04.2 -> 23.04.3) Subpackages: pim-sieve-editor-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== pimcommon ==== Version update (23.04.2 -> 23.04.3) Subpackages: libKF5PimCommon5 libKF5PimCommonAkonadi5 - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== signon-kwallet-extension ==== Version update (23.04.2 -> 23.04.3) - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== skanlite ==== Version update (23.04.2 -> 23.04.3) Subpackages: skanlite-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== spectacle ==== Version update (23.04.2 -> 23.04.3) Subpackages: spectacle-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== step ==== Version update (23.04.2 -> 23.04.3) Subpackages: step-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2 ==== umbrello ==== Version update (23.04.2 -> 23.04.3) Subpackages: umbrello-lang - Update to 23.04.3 * New bugfix release * For more details please see: * https://kde.org/announcements/gear/23.04.3/ - No code change since 23.04.2

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 07 Jul '23

07 Jul '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - gcc7: Uninstallable: package bash-5.2.15.x86_64 requires libreadline.so.8()(64bit), but none of the providers can be installed - python-novaclient: Fails to build - python-openstackclient: Fails to build - python-python-jenkins: Fails to build Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

1 0

Any window belongs to All Activities on 20230705
by Miguel Rozsas 07 Jul '23

07 Jul '23

Hi there, Today I've updated from 20230625 to 20230705 and any window on KDE is shown on all activities ! Context menu on any window icon on taskbar , 'Show on activity' sub menu , is set to 'all activities'. Selecting any other activity has no effect. Anyone else uses activities and can confirm ? Should I open a issue on kde bugs ?

1 1

New Tumbleweed snapshot 20230706 released!
by Dominique Leuenberger 07 Jul '23

07 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: MozillaFirefox (114.0.2 -> 115.0) accountsservice eog (44.2 -> 44.3) evince (44.2 -> 44.3) fwupd gdm gnome-maps (44.2 -> 44.3) gnome-user-docs (44.1 -> 44.3) gupnp (1.6.3 -> 1.6.4) hwinfo (22.3 -> 23.1) ibus-table-others (1.3.13 -> 1.3.16) libxcrypt (4.4.34 -> 4.4.35) mozilla-nss (3.89.1 -> 3.90) pulseaudio python-configobj python-urllib3 (2.0.2 -> 2.0.3) python311 (3.11.3 -> 3.11.4) python311-core (3.11.3 -> 3.11.4) swtpm upower (1.90.0 -> 1.90.1) wicked === Details === ==== MozillaFirefox ==== Version update (114.0.2 -> 115.0) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 115.0 * Support for importing payment methods saved in Chrome-based browser * Hardware video decoding is now enabled for Intel GPUs on Linux * The Tab Manager dropdown now features close buttons, so tabs can be closed more quickly * Streamlined the user interface for importing data in from other browsers * Users without platform support for H264 video decoding can now fallback to Cisco's OpenH264 plugin for playback. * Undo and redo are now available in Password fields * Changed: On Linux, middle clicks on the new tab button will now open the xclipboard contents in the new tab. If the xclipboard content is a URL then that URL is opened, any other text is opened with your default search provider. * Changed: For users with a Firefox Colorways built-in theme, the theme will be automatically migrated to the same theme hosted on addons.mozilla.org for Firefox profiles that have disabled add-ons auto-updates. This will allow users to keep their Colorways theme when they are later removed from Firefox installer files. * Changed: Certain Firefox users may come across a message in the extensions panel indicating that their add-ons are not allowed on the site currently open. We have introduced a new back-end feature to only allow some extensions monitored by Mozilla to run on specific websites for various reasons, including security concerns. * HTML5: The builtin editor now behaves similarly to other browsers with `contenteditable` and `designMode` when splitting a node, e.g. typing Enter to split a paragraph, and also when joining two nodes, e.g. typing Backspace at the start of a paragraph to join the paragraph and the previous one. When a node is split, the builtin editor creates a new node after the original one instead of before, i.e. creates the right node instead of the left node. Similarly, when two nodes are joined, the builtin editor deletes the latter node and moves its children to the end of the preceding node instead of deleting the former node and moving its child to the start of the following node. * HTML5: WebRTC application developers can now specify a target in milliseconds of media for the jitter buffer to hold. Altering the target value allows applications to control the tradeoff between playout delay and the risk of running out of audio or video frames due to network jitter. * HTML5: Change array by copy provides additional methods on `Array.prototype` and `TypedArray.prototype` to enable changes on the array by returning a new copy of it with the change. * HTML5: The animation-composition property is now supported, allowing a declarative way to define the composite operation used when multiple animations affect the same property simultaneously. * HTML5: Added the URL.canParse() function to allow easy and fast checking if URLs are valid and parseable. * HTML5: IndexedDB is now also supported in private browsing without memory limits thanks to encrypted storage on disk. The temporary keys to decrypt the information are hold in RAM only and all stored information is purged at the normal end of a private browsing session from disk. * HTML5: Supports conditions are now supported in CSS import rules @import supports(...) * Developer: In web development, we rely on third-party libraries which you may not be interested in while debugging. These can be ignored. Ignoring them means that breakpoints will not get hit and they are skipped during stepping. You can now choose to **Hide ignore-listed sources** in the Developer Tools source tree * Developer: We have introduced a new option, `devtools.f12_enabled`, that can be utilized to prevent the accidental use of the F12 key, which opens the DevTools toolbox (bug). * Enterprise: You can find information about policy updates and enterprise specific bug fixes in the Firefox for Enterprise 115 Release Notes. MFSA 2023-22 (bsc#1212438) * CVE-2023-3482 (bmo#1839464) Block all cookies bypass for localstorage * CVE-2023-37201 (bmo#1826002) Use-after-free in WebRTC certificate generation * CVE-2023-37202 (bmo#1834711) Potential use-after-free from compartment mismatch in SpiderMonkey * CVE-2023-37203 (bmo#291640) Drag and Drop API may provide access to local system files * CVE-2023-37204 (bmo#1832195) Fullscreen notification obscured via option element * CVE-2023-37205 (bmo#1704420) URL spoofing in address bar using RTL characters * CVE-2023-37206 (bmo#1813299) Insufficient validation of symlinks in the FileSystem API * CVE-2023-37207 (bmo#1816287) Fullscreen notification obscured * CVE-2023-37208 (bmo#1837675) Lack of warning when opening Diagcab files * CVE-2023-37209 (bmo#1837993) Use-after-free in `NotifyOnHistoryReload` * CVE-2023-37210 (bmo#1821886) Full-screen mode exit prevention * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886, bmo#1836550, bmo#1837450) Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, ... changelog too long, skipping 9 lines ... - removed obsolete mozilla-buildfixes.patch ==== accountsservice ==== Subpackages: accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 - Rebase accountsservice-sysconfig.patch: (boo#1212675 boo#1212973). - Remove accountsservice-assume-gdm.patch: Fixed by new rebasing of accountsservice-sysconfig.patch. ==== eog ==== Version update (44.2 -> 44.3) Subpackages: eog-lang - Update to version 44.3: + EOG gets stuck in infinite while loop if animation loops a finite number of times. + Updated translations. ==== evince ==== Version update (44.2 -> 44.3) Subpackages: evince-lang evince-plugin-comicsdocument evince-plugin-djvudocument evince-plugin-dvidocument evince-plugin-pdfdocument evince-plugin-tiffdocument evince-plugin-xpsdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Update to version 44.3: + Add support for validating appdata versions. + Check for NEWS and appdata updates for new releases. + Don't discard matches without text area in the find bar. + Updated translations. ==== fwupd ==== Subpackages: fwupd-bash-completion fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 - Enable efi_fw_update on riscv64 - fwupdagent and dfu-tool are only built %{with efi_fw_update} ==== gdm ==== Subpackages: gdm-lang gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Merge pulseaudio-gdm-hooks into the gdm package. This was previously part of pulseaudio.spec, which was fairly complex (dir ownership, separate tmpfiles, dependencies) and it also caused pulseaudio.spec to runtime depend on gdm. Avoid all of that by just adding it here: + Add default.pa + Add entries to gdm.tmpfiles ==== gnome-maps ==== Version update (44.2 -> 44.3) Subpackages: gnome-maps-lang - Update to version 44.3: + Add support for auth headers in the OpenTripPlanner plugin. + Updated translations. ==== gnome-user-docs ==== Version update (44.1 -> 44.3) - Update to version 44.3: + Updated translations. ==== gupnp ==== Version update (1.6.3 -> 1.6.4) - Update to version 1.6.4: + Keep a weak reference to proxy in action. + Add API to provide HTTP credentials for simple authentication. + Remove xmlRecoverMemory usage. - Drop 80e68995.patch: Fixed upstream. ==== hwinfo ==== Version update (22.3 -> 23.1) - merge gh#openSUSE/hwinfo#137 - adjust exported symbols to yast2-hardware-detection test case - 23.1 - merge gh#openSUSE/hwinfo#134 - restrict libhd exported symbols to the documented API (bsc#1212756) - fix pppoe compile warning - 23.0 ==== ibus-table-others ==== Version update (1.3.13 -> 1.3.16) Subpackages: ibus-table-rustrad ibus-table-translit - Update to 1.3.16 * feat: several improvements to Old Hungarian * fix: remove { and } from VALID_INPUT_CHARS in LaTeX table ==== libxcrypt ==== Version update (4.4.34 -> 4.4.35) Subpackages: libcrypt1 libcrypt1-32bit libxcrypt-devel - update to 4.4.35: * Fix build with Perl v5.38.0 (issue #170). * Fix build with MinGW-w(32|64). ==== mozilla-nss ==== Version update (3.89.1 -> 3.90) Subpackages: libfreebl3 libsoftokn3 mozilla-nss-certs mozilla-nss-tools - update to NSS 3.90 * bmo#1623338 - ride along: remove a duplicated doc page * bmo#1623338 - remove a reference to IRC * bmo#1831983 - clang-format lib/freebl/stubs.c * bmo#1831983 - Add a constant time select function * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access. * bmo#1830973 - output early build errors by default * bmo#1804505 - Update the technical constraints for KamuSM * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates * bmo#1790763 - Enable default UBSan Checks * bmo#1786018 - Add explicit handling of zero length records * bmo#1829391 - Tidy up DTLS ACK Error Handling Path * bmo#1786018 - Refactor zero length record tests * bmo#1829112 - Fix compiler warning via correct assert * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator * bmo#1784163 - Fix reading raw negative numbers * bmo#1748237 - Repairing unreachable code in clang built with gyp * bmo#1783647 - Integrate Vale Curve25519 * bmo#1799468 - Removing unused flags for Hacl* * bmo#1748237 - Adding a better error message * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6 * bmo#1782980 - Fall back to the softokn when writing certificate trust * bmo#1806010 - FIPS-104-3 requires we restart post programmatically * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13 * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf * bmo#1822076 - fix rst warnings in nss doc * bmo#1821997 - Fix incorrect pygment style * bmo#1821292 - Change GYP directive to apply across platforms * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag - add nss-fix-bmo1836925.patch to fix build-errors - Remove nss-fips-tls-allow-md5-prf.patch, since we no longer need the workaround in FIPS mode (bsc#1200325) - Remove nss-fips-tests-skip.patch. This is no longer needed since we removed the code to short-circuit broken hashes and moved to using the SLI - Add nss-allow-slow-tests.patch, which allows a timed test to run longer than 1s. This avoids turning slow builds into broken builds - Add nss-fips-drbg-libjitter.patch to use libjitterentropy for entropy. This is disabled until we can avoid the inline assembler in the latter's header file that relies on GNU extensions - Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency checks ==== pulseaudio ==== Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse - Drop pulseaudio-gdm-hooks subpackage including default.pa-for-gdm and pulseaudio-gdm-hooks.tmpfiles. Moved to gdm instead. ==== python-configobj ==== - Add remove_six.patch (gh#DiffSK/configobj#239) removing the need for six. ==== python-urllib3 ==== Version update (2.0.2 -> 2.0.3) - Disable test_deprecated_no_scheme so it needs network connection to run correctly. - update to 2.0.3: * Allowed alternative SSL libraries such as LibreSSL, while still issuing a warning as we cannot help users facing issues with implementations other than OpenSSL. * Deprecated URLs which don't have an explicit scheme * Fixed response decoding with Zstandard when compressed data is made of several frames. * Fixed ``assert_hostname=False`` to correctly skip hostname check. ==== python311 ==== Version update (3.11.3 -> 3.11.4) Subpackages: python311-curses python311-dbm - Update to Python 3.11.4: - gh-103142: The version of OpenSSL used in Windows and Mac installers has been upgraded to 1.1.1u to address CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 fixed previously in 1.1.1t (gh-101727). - gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). - gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. - gh-103935: trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). - gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details (fixing CVE-2007-4559, bsc#1203750). - Remove upstreamed patches: - CVE-2007-4559-filter-tarfile_extractall.patch ==== python311-core ==== Version update (3.11.3 -> 3.11.4) Subpackages: libpython3_11-1_0 python311-base - Update to Python 3.11.4: - gh-103142: The version of OpenSSL used in Windows and Mac installers has been upgraded to 1.1.1u to address CVE-2023-2650, CVE-2023-0465, CVE-2023-0466, CVE-2023-0464, as well as CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 fixed previously in 1.1.1t (gh-101727). - gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). - gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - gh-104049: Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. - gh-103935: trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). - gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have a new filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details (fixing CVE-2007-4559, bsc#1203750). - Remove upstreamed patches: - CVE-2007-4559-filter-tarfile_extractall.patch ==== swtpm ==== Subpackages: swtpm-selinux - Make selinux optional to allow building this package for Leap, too. ==== upower ==== Version update (1.90.0 -> 1.90.1) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 upower-lang - Update to 1.90.1: * Detect headsets with kernel batteries such as Logitech and Steelseries headsets, and make them automatically disappear if the headset is turned off (if the kernel driver supports the wireless_status attribute) * Hide duplicate Logitech Bluetooth devices (Bolt-compatible devices connected through Bluetooth would show as 2 batteries) * Hide duplicate Logitech wireless devices when they get connected through USB as well * Fix Bluetooth device names not synchronising, and use user-chosen names when available * Handle the "present" sysfs attribute changing * Fix iDevices not appearing * Fix reading capacity_level with newer libgudev ==== wicked ==== Subpackages: wicked-service - ifconfig: fix arp notify loop (boo#1212806) and burst sending [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]

1 0

openSUSE:Factory - Build fail notification
by DimStar / Dominique Leuenberger 07 Jul '23

07 Jul '23

Dear Package maintainers and hackers. Below package(s) in openSUSE:Factory have had problems for at least 4 weeks. We tried to send out notifications to the configured bugowner/maintainers of the package(s), but so far no fix has been submitted. This probably means that the maintainer/bugowner did not yet find the time to look into the matter and he/she would certainly appreciate help to get this sorted. - python-pandas: Uninstallable: nothing provides python310-Bottleneck >= 1.3.2 needed by python310-pandas-all-2.0.2.noarch - rubygem-agama: Uninstallable: nothing provides rubygem(ruby:3.2.0:ruby-dbus:0.22) >= 0.22 needed by ruby3.2-rubygem-agama-2.1.x86_64 Unless somebody is stepping up and submitting fixes, the listed package(s) are going to be removed from openSUSE:Factory. Kind regards, DimStar / Dominique Leuenberger <dimstar(a)opensuse.org>

3 3

lvfs
by Leandro Almeida 06 Jul '23

06 Jul '23

Hello, I used this command in the Konsole terminal, and it gave an error in lvfs. sudo zypper clean && sudo zypper update && sudo zypper refresh-services && sudo zypper dist-upgrade && sudo zypper dup && s udo zypper patch-check && sudo zypper patch && sudo zypper cleanlocks && sudo zypper purge-kernels && sudo zypper packages --unneeded && flatpak update && fwupdmgr --force refresh && fwupmgr update Atualizando lvfs Baixando… [************************************** ] Failed to update metadata for lvfs: new signing timestamp was 37807 seconds older Another feedback too, is when using sudo zypper rm -u steam, the steam icon remained on the desktop. I installed the package that opensuse distributes in the discover store. Thanks in advance, 😄👍 lenovo ideapad 330 15igm 81fn 8gb ram ceamere ssd 256gb ceamere intel uhd 600 i915 geminilake glk2 intel celeron n4000 (2) 1.10ghz max 2.60ghz ptbr utf8 abnt2 Opensuse tumbleweed KDE plasma wayland Sorry for sending too many feedbacks 😅😅

2 2

install updates on reboot when needed
by Daniele Granata 06 Jul '23

06 Jul '23

Dears, in recent months make a zypper dup cause some problems to my system, logout from kde broken, session that will not close properly keeping open sw like Chromium or DBeaver, all resolved with a hard power off. May I ask some sort of option in zypper dup to apply the file installation only before the next boot? Thank you -- Daniele

7 19

New Tumbleweed snapshot 20230705 released!
by Dominique Leuenberger 06 Jul '23

06 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ghostscript mariadb (10.11.3 -> 11.0.2) ovmf policycoreutils python-argcomplete (3.0.8 -> 3.1.1) suse-module-tools (16.0.31 -> 16.0.32) yast2-network (4.6.4 -> 4.6.5) yast2-trans (84.87.20230619.113a4fdc71 -> 84.87.20230630.ccfa6add46) === Details === ==== ghostscript ==== Subpackages: ghostscript-x11 - CVE-2023-36664.patch fixes CVE-2023-36664 see https://bugs.ghostscript.com/show_bug.cgi?id=706761 "OS command injection in %pipe% access" and https://bugs.ghostscript.com/show_bug.cgi?id=706778 "%pipe% allowed_path bypass" and bsc#1212711 "permission validation mishandling for pipe devices (with the %pipe% prefix or the | pipe character prefix)" ==== mariadb ==== Version update (10.11.3 -> 11.0.2) Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Update to 11.0.2: * release notes and changelog: https://mariadb.com/kb/en/mariadb-11-0-2-release-notes/ https://mariadb.com/kb/en/mariadb-11-0-2-changelog/ ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Initial riscv64 support * Update descriptors.tar.xz * Enable on TW/16 (riscv64 toolchain not available on 15) - Add ovmf-riscv64-missing-memcpy.patch: fixes undefined memcpy ==== policycoreutils ==== Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils - Only recommend policycoreutils-devel. The requires causes build issues and this can be used with a policy from a different source - Required fixed python3-selinux, not version dependend sub-packages ==== python-argcomplete ==== Version update (3.0.8 -> 3.1.1) - Update to version 3.1.1 * Search through asdf shims * Use \` as escape character in PowerShell (#434) - from version 3.1.0 * setup.py -> pyproject.toml migration start (#427) * Improve user install logic in activate-global-python-argcomplete (#437) * Ensure Python 3.7 compatibility in check_console_script (#436) * ZSH implementation fixes (#431, #433) * Documentation improvements - Drop obsolete patch * trim-test-deps.patch ==== suse-module-tools ==== Version update (16.0.31 -> 16.0.32) Subpackages: suse-module-tools-scriptlets - Update to version 16.0.32: * rpm-script: check for regenerate-initrd-posttrans in %posttrans (boo#1212957) ==== yast2-network ==== Version update (4.6.4 -> 4.6.5) - Fix typo when writing the wireless channel (bsc#1212976) - 4.6.5 ==== yast2-trans ==== Version update (84.87.20230619.113a4fdc71 -> 84.87.20230630.ccfa6add46) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20230630.ccfa6add46: * Translated using Weblate (Indonesian) * Translated using Weblate (Finnish)

1 0

New Tumbleweed snapshot 20230704 released!
by Dominique Leuenberger 05 Jul '23

05 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: hwinfo (22.2 -> 22.3) kdump (1.9.2 -> 1.9.3) kexec-tools (2.0.26 -> 2.0.26.0) perl-Bootloader (1.5 -> 1.6) systemd xfce4-settings (4.18.2 -> 4.18.3) === Details === ==== hwinfo ==== Version update (22.2 -> 22.3) Subpackages: libhd22 - merge gh#openSUSE/hwinfo#133 - avoid linking problems with libsamba (bsc#1212756) - 22.3 ==== kdump ==== Version update (1.9.2 -> 1.9.3) - upgrade to version 1.9.3 * fix calibrate * update kdump(7) manpage * turn missing ssh, lftp or host key into a fatal error * depend on openssh-clients not openssh - refreshed calibrate values ==== kexec-tools ==== Version update (2.0.26 -> 2.0.26.0) - Pull kexec-bootloader from perl-Bootloader, bump version so that perl-Bootloader can obsolete kexec-tools containing kexec-bootloader (bsc#1211082). ==== perl-Bootloader ==== Version update (1.5 -> 1.6) - merge gh#openSUSE/perl-bootloader#154 - move kexec-bootloader from kexec-tools to perl-Bootloader - 1.6 ==== systemd ==== Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev - Split off sd-boot into separate "systemd-boot" subpackage ==== xfce4-settings ==== Version update (4.18.2 -> 4.18.3) Subpackages: xfce4-settings-color xfce4-settings-lang - Update to version 4.18.3 * Displays: Fix finding a valid mode by refresh rate * dialogs: Secure use of GSettings * xfsettingsd: Fix wrong test for property removal * xfsettingsd: Update also the type when updating a value * keyboard-settings: Fix critical when opening layout selection dialog * appearance-install-theme: Fix error message * appearance-install-theme: Do not mention file size in error message * appearance-install-theme: Check for theme package validity * appearance-install-theme: Update GTK icon cache after installing * appearance-install-theme: detect icon themes first (#271) * appearance-install-theme: make cleanup safer * appearance-install-theme: Use recommended way of command substitution. * appearance-install-theme: Convert to POSIX * Update bug report address * display: Check for XError on transform apply * Translation Updates

1 0

New Tumbleweed snapshot 20230703 released!
by Dominique Leuenberger 04 Jul '23

04 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Imath (3.1.6 -> 3.1.9) SDL2 (2.28.0 -> 2.28.1) kbd (2.5.1 -> 2.6.1) perl-Image-ExifTool (12.63 -> 12.64) rubygem-actioncable-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-actionmailbox-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-actionmailer-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-actionpack-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-actiontext-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-actionview-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-activejob-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-activemodel-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-activerecord-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-activestorage-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-activesupport-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-rails-7.0 (7.0.4.3 -> 7.0.5.1) rubygem-railties-7.0 (7.0.4.3 -> 7.0.5.1) === Details === ==== Imath ==== Version update (3.1.6 -> 3.1.9) - update to 3.1.9: * Fix Heap-buffer-overflow in internal_huf_decompress * Support for DWA compression in OpenEXRCore * Fix for threadpool deadlocks during shutdown on Windows * Stack-buffer-overflow in DwaCompressor_readChannelRules ==== SDL2 ==== Version update (2.28.0 -> 2.28.1) - Update to release 2.28.1 * Added support for the Nintendo Online Famicom controllers * Improved support for third-party Nintendo Switch controllers * Fixed setting the player LED on Nintendo Switch controllers * Added Linux controller mapping for the Logitech Chillstream ==== kbd ==== Version update (2.5.1 -> 2.6.1) Subpackages: kbd-legacy - Update to version 2.6.1: - libkfont: * Fix font saving from linux kernel if KD_FONT_OP_GET_TALL is available. * Respect font height when writing psf2 header. - keymaps: * Create new 'mac-fr' layout for contemporary French Macs. - Version 2.6.0 changelog: - libkfont: * Leverage KD_FONT_OP_GET/SET_TALL font operations. The new KD_FONT_OP_GET/SET_TALL font operations allow to load fonts taller than 32 pixels by dropping the VGA-specific vertical pitch limitation (requires kernel 6.2 or later). * Use threadsafe strtok_r. * Increase soname version. - setvtrgb: * Fix read from pipe. The pipe is not rewindable, but we don't really need to rewind() but we need to unread one character. - keymaps: * i386/dvorak/dvorak-de.map: Add dvorak-de.map from console-data. * i386/qwerty/is-latin1.map: the circumflex should also be available in its original level-3 position. * i386/qwerty/la-latin1.map: Convert the characters expressed in Latin-1 to the named constants, to ease up transition to Unicode. * pine/en.map: New version of pinephone keyboard map file. - unimaps: * Add mapping for U+25CF. The unicode maps in font files like eurlatgr.psfu and cp850-8x16.psfu have an entry for U+25CF, but the plaintext unimap files do not. - tests: * Use strace to track syscalls. Now strace is powerful enough to show ioctls specific to console configuration. - po: * Update translations (from translationproject.org). ==== perl-Image-ExifTool ==== Version update (12.63 -> 12.64) Subpackages: exiftool perl-File-RandomAccess - Update to 12.64: * Added a new Sony LensType (thanks Jos Roost) * Added config_files/guano.config to the distribution (thanks StarGeek) * Added support for Garmin Low-resolution Video (GLV) files * Added JUMBF to the list of deletable groups * Added (untested) read support for spherical video tags in Matroska videos * Decode a number of new Nikon Z9 tags (thanks Warren Hatch) * Decode AmbisonicAudio tags in spherical MP4 vidoes * Decode another Apple tag * Improved French translations (thanks Philippe Bonnaure of GraphicConverter) * Patched to allow writing QuickTime-based videos where the audio/video sample description comes after the sample pointers * Fixed parsing of GPS from Insta360 videos to properly skip void fixes * Fixed problem where Apple iPhone 14 images produced invalid XML in -X output when using -struct option * API Changes: + Added StructFormat option[1] to allow JSON-format serialized structures + Added NoDups option to eliminate duplicate items from queued values when writing List-type tags ==== rubygem-actioncable-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-actionmailbox-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-actionmailer-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-actionpack-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-actiontext-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-actionview-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-activejob-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-activemodel-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-activerecord-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-activestorage-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-activesupport-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-rails-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released ==== rubygem-railties-7.0 ==== Version update (7.0.4.3 -> 7.0.5.1) - updated to version 7.0.5.1 * https://rubyonrails.org/2023/6/26/Rails-Versions-7-0-5-1-6-1-7-4-have-been-… - updated to version 7.0.5 * https://rubyonrails.org/2023/5/24/Rails-7-0-5-has-been-released

1 0

New Tumbleweed snapshot 20230701 released!
by Dominique Leuenberger 03 Jul '23

03 Jul '23

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick (7.1.1.11 -> 7.1.1.12) NetworkManager (1.42.6 -> 1.42.8) busybox-links colord-gtk evolution (3.48.3 -> 3.48.4) evolution-data-server (3.48.3 -> 3.48.4) gimp glib-networking (2.76.0 -> 2.76.1) gnome-control-center (44.2 -> 44.3) gnome-software (44.2 -> 44.3) gstreamer (1.22.3 -> 1.22.4) gstreamer-plugins-bad (1.22.3 -> 1.22.4) gstreamer-plugins-base (1.22.3 -> 1.22.4) gstreamer-plugins-good (1.22.3 -> 1.22.4) gstreamer-plugins-libav (1.22.3 -> 1.22.4) gstreamer-plugins-ugly (1.22.3 -> 1.22.4) gvfs (1.50.4 -> 1.50.5) kmod libdlm (4.1.0 -> 4.2.0) libgexiv2 libopenmpt (0.6.10 -> 0.7.2) libphonenumber (8.12.23 -> 8.13.15) libtommath libunwind (1.6.2 -> 1.7.0) libwps (0.4.13 -> 0.4.14) libzypp (17.31.14 -> 17.31.15) linux-glibc-devel (6.3 -> 6.4) open-vm-tools protobuf-c protobuf21 python-attrs python-pycryptodome qemu sddm speech-dispatcher webkit2gtk3 (2.40.2 -> 2.40.3) webkit2gtk3-soup2 (2.40.2 -> 2.40.3) === Details === ==== ImageMagick ==== Version update (7.1.1.11 -> 7.1.1.12) Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.1.12 - added patches fix CVE-2023-3428 [bsc#1212847], heap-buffer-overflow in coders/tiff.c + ImageMagick-CVE-2023-3428.patch ==== NetworkManager ==== Version update (1.42.6 -> 1.42.8) Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Update to version 1.42.8: + Add support for ppp 2.5.0. + Fix nft rules for balance-slb bonding. + Support port priority for bonding. + Fix regression handling the PKEY_ID for infiniband profiles in ifcfg-rh format. + Fix race in nm-cloud-setup that caused partial configuration and loss of connectivity with multiple interfaces. + Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly required for IPv6 sharing. + Various bugfixes related to team, Wi-Fi P2P, IPv6LL. + Automatically unblock autoconnect of profiles during reapply. - Update https://www.gnome.org/projects/NetworkManager/ URL tag to NM's newest home page: https://networkmanager.dev/, and main package summary to: standard Linux network configuration tool suite. ==== busybox-links ==== Subpackages: busybox-bzip2 busybox-coreutils busybox-ed busybox-findutils busybox-gawk busybox-grep busybox-gzip busybox-misc busybox-psmisc busybox-sed busybox-sendmail busybox-tar busybox-which busybox-xz - Make sure last stays in busybox-util-linux, even if we moved the original binary from util-linux to wtmpdb ==== colord-gtk ==== - fix segfault when turning monitor back on (bsc#1212840): Fix-the-callback-signature-to-fix-a-crash.patch ==== evolution ==== Version update (3.48.3 -> 3.48.4) Subpackages: evolution-lang evolution-plugin-spamassassin - Update to version 3.48.4: + EMailSignatureScriptDialog: Cannot choose script file under Flatpak. + EMeetingListStore: Wrong role section picked in Attendees dialog. + Bug Fixed: - HTML attachment viewport is tiny. - EMailFormatter: Style change not propagated to all instances. - Drop abdcc5af227972da8db1731f05e66a14eb4f6656.patch: Fixed upstream. ==== evolution-data-server ==== Version update (3.48.3 -> 3.48.4) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.48.4: + Bug Fixed: Camel: Learn as Junk filter action not actually running the learn function. ==== gimp ==== Subpackages: gimp-plugin-aa libgimp-2_0-0 libgimpui-2_0-0 - Drop baselibs.conf: the biarch module is not used anymore. ==== glib-networking ==== Version update (2.76.0 -> 2.76.1) Subpackages: glib-networking-lang - Update to version 2.76.1: + Fix proxy tests when built against libproxy 0.5. + Updated translations. - Drop a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: fixed upstream. - Add a7db10e8862050f19af5c2eebcd1d590a04d5ced.patch: Fix tests using libproxy 0.5. ==== gnome-control-center ==== Version update (44.2 -> 44.3) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces - Update to version 44.3: + Updated translations. ==== gnome-software ==== Version update (44.2 -> 44.3) Subpackages: gnome-software-lang gnome-software-plugin-packagekit - Update to version 44.3: + Fix a crash when refining a flatpak app. + Fix a state recover after a failed app update. + Updated translations. ==== gstreamer ==== Version update (1.22.3 -> 1.22.4) Subpackages: gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 - Update to version 1.22.4: + Highlighted bugfixes: - Security fixes for flacparse, dvdspu, and subparse. - d3d11videosink: Fix error on pause and play. - decklink: Correctly handle SDK strings on macOS and free strings after usage on Linux. - filesink: Fix buffered mode writing of buffer lists and buffers with multiple memories. - gldownload: handle passthrough without a critical. - h265parse: Fix framerate handling regression. - oggdemux: vp8 fixes. - mp4mux, qtmux, qtdemux: Opus audio mapping fixes. - pngdec: Fix wrong colours output from 16bit RGB images. - ptp clock: Work around ptpd bug in default configuration. - srtpdec: fix critical warnings on shutdown. - v4l2src: fix support for bayer format. - v4l2videoenc: support force-keyframe event in v4l2 encoder. - vtenc: apply DTS offset to ensure DTS <= PTS. - gst-python: allow more functions to be called before gst_init(). - various bug fixes, memory leak fixes, and other stability and reliability improvements. + gstreamer: - filesink: Fix buffered mode writing of buffer lists and buffers with multiple memories. - basesink: Clear EOS flag on STREAM-START event. - typefindhelper: downgrade bogus error level debug log message. - ptp: . Correctly parse clock ID from the commandline parameters in the helper. . Work around bug in ptpd in default configuration. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-bad ==== Version update (1.22.3 -> 1.22.4) Subpackages: gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Update to version 1.22.4: + asfmux: fix possible unaligned write on 32-bit ARM. + d3d11videosink: Fix error on pause and play. + d3dvideosink: Fix navigation event leak. + decklink: Correctly handle SDK strings on macOS and free strings after usage on Linux. + dvdspu: Make sure enough data is allocated for the available data. + fdkaacdec: Support up to 5 rear channels. + h265parse: Fix framerate handling. + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3 auto-detection. + sdpdemux: ensure that only one srcpad is created per stream. + srtpdec: fix critical warnings on shutdown. + testsrcbin: Remove spurious caps unref. + va: map the mbbrc to correct enum value in get_property(). + vtenc: apply DTS offset to ensure DTS <= PTS. + vtdec: time glitches on h264 playback. + waylandsink: Emit "map" signal boarder surface is ready. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-base ==== Version update (1.22.3 -> 1.22.4) Subpackages: gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 - Update to version 1.22.4: + alsasink: Fix stall for transition from PAUSED to READY with USB speakerphone. + appsink: unref buffer in prev sample early so buffers from v4l2 can be released properly. + basetextoverlay: Fix typo in "text-y" property description. + gldownload: handle passthrough without a critical. + glfilter: add parent meta to output buffer for input buffer. + oggdemux: vp8: Push headers downstream and detect keyframe packets. + opus: Fix potential crash when getting unexpected channel position. + streamsynchronizer: reset eos on STREAM_START. + subparse: Look for the closing > of a tag after the opening <. + video: convertframe: Add D3D11 specific conversion path. + videometa: Only validate the alignment only when it contains some info. + video-blend: Fix linking error with C++. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-good ==== Version update (1.22.3 -> 1.22.4) Subpackages: gstreamer-plugins-good-extra gstreamer-plugins-good-gtk gstreamer-plugins-good-jack gstreamer-plugins-good-lang gstreamer-plugins-good-qtqml - Update to version 1.22.4: + flacparse: Avoid integer overflow in available data check for image tags. + flvmux: use the correct timestamp to calculate wait times. + isomp4: Fix (E)AC-3 channel count handling. + jpegdec: fixes related to interlaced jpeg. + pngdec: Fix wrong colours output from 16bit RGB images. + qtmux, qtdemux: fix byte order for opus extension. + rtspsrc: Do not try send dropped get/set parameter. + qt5, qt6: Add more meson options and eliminate all automagic. + qt: glrenderer: don't attempt to use QWindow from non-Qt main thread. + qml6glsink: Support building on win32. + v4l2src: fix support for bayer format. + v4l2: Change to query only up to V4L2_CID_PRIVATE_BASE+V4L2_CID_MAX_CTRLS. + v4l2videodec: treat MPEG-1 format as MPEG-2. + v4l2videoenc: support force keyframe event in v4l2 encoder. + tests: rtpbin_buffer_list: fix possible unaligned write/read on 32-bit ARM. - Add libQt5Gui-private-headers-devel BuildRequires: New explicit dependency. - Rebase reduce-required-meson.patch. - Drop adaptivedemux2-uri-data.patch: Fixed upstream. ==== gstreamer-plugins-libav ==== Version update (1.22.3 -> 1.22.4) - Update to version 1.22.4: + No changes. - Rebase reduce-required-meson.patch. ==== gstreamer-plugins-ugly ==== Version update (1.22.3 -> 1.22.4) Subpackages: gstreamer-plugins-ugly-lang - Update to version 1.22.4: + No changes. - Rebase reduce-required-meson.patch. ==== gvfs ==== Version update (1.50.4 -> 1.50.5) Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse gvfs-lang - Update to version 1.50.5: + smbbrowse: Fix empty device listing after unrelated mount failure. + udisks: Fix missing unmount notifications. + trash: - Fix nfs4 and cifs monitoring. - Fix wrongly reported item-count. + smb: Allow renaming a file to the same name with a different case. + mtp: Emit delete event on device disconnection. + Some other fixes and improvements. + Updated translations. - Drop patches fixed upstream: + fc2669f63c5def1528dda2e7833db5774aa08e22.patch + 85bfb701fc95abeaa8a8ca3d9059378a9490f738.patch + 41862c0179f834d8bc3bd84ce78ee495050f2676.patch ==== kmod ==== Subpackages: kmod-bash-completion libkmod2 - Fix up usrmerge patches to make the feature configurable (boo#1212835) * testsuite-Handle-different-sysconfdir.patch * testsuite-depmod-use-defines-for-the-rootfs-lib_modu.patch * depmod-Introduce-outdir-option.patch * man-depmod.d-Fix-incorrect-usr-lib-search-path.patch * kmod-Add-config-command-to-show-compile-time-configu.patch - Refresh usr-lib-modprobe.patch - Refresh usr-lib-modules.patch - Refresh no-stylesheet-download.patch ==== libdlm ==== Version update (4.1.0 -> 4.2.0) Subpackages: libdlm3 - Update to v4.2.0 * remove patches included upstream + bug-1191734_0001-libdlm-add-stdint.h-to-api-header.patch + bug-1191734_0002-dlm_controld-create-var-parent-directories.patch + bug-1191734_0003-stonith_helper-fix-build.patch + bug-1191734_0004-plock-move-clear-waiter-to-debug-info.patch + bug-1191734_0005-treewide-try-to-resolve-symbols-at-linking-time.patch + bug-1191734_0006-dlm_controld-add-version-check-for-libquorum.patch + bug-1191734_0007-dlm_tool-man-add-command-joinleave-USAGE.patch + bug-1191734_0008-man-add-reload_config-in-dlm_tool-dlm.conf.patch + bug-1191734_0009-add-new-dlm_tool-command-reload_config.patch + bug-1191734_0010-dlm_tool-man-add-new-command-set_config.patch + bug-1191734_0011-dlm_tool-dlm_controld-add-new-feature-set_config.patch + bug-1191734_0012-fix-some-minor-bugs.patch + bug-1191734_0013-dlm_controld-fix-string-copies.patch + bug-1191734_0014-man-page-updates.patch * patch to disable annobin (still not available in openSUSE) + 0005-build-dlm_controld-disable-annobin-plugin.patch * patch to remove unnecesary header (boo#1212767) + 0006-dlm_controld-remove-unnecessary-header-include.patch * patch to remove -fcf-protection=full, not supported in SLE15 + 0007-Revert-treewide-add-fcf-protection-full-to-CFLAGS.patch ==== libgexiv2 ==== - Drop baselibs.conf: the biarch module is not used anymore. - Add fix-32bit-compat.patch: Fix 32bit build compatibility. Taken from https://gitlab.gnome.org/GNOME/gexiv2/-/merge_requests/75 - Add 06adc8fb70cb8c77c0cd364195d8251811106ef8.patch: Fix compatibility with exiv2 main branch. ==== libopenmpt ==== Version update (0.6.10 -> 0.7.2) - Update to 0.7.2: * [New] MOD: Can now read modified 8-channel MOD files from the DOS game Aleshar - The World Of Ice. * [Sec] Possible out-of-bounds read or write when reading malformed MED files. (r19389) * [Bug] The Opal OPL3 emulator symbols were not namespaced properly. - Update to 0.7.1 * IT: Improved fingerprinting of early ModPlug Tracker versions. * XMF: Modules from Astroidea demos can now be read as well. - Changes in 0.7.0: * [New] 667 files from Composer 667 are now supported. * [New] GTK and GT2 files from Gramouf Tracker are now supported. * [New] Can now read a variant of the DSMI AMF format called DMF, as found in various DOS games distributed by Webfoot (Tronic, H2O, PowBall, etc.). * [New] DSM files from Dynamic Studio are now supported. * [New] XMF files from the DOS game Imperium Galactica are now supported. * [New] Can now read the hacked MOD format (DMF) from the game âApocalypse Abyssâ. * [New] libopenmpt: New APIs for getting the current tempo as a floating point value: openmpt::module::get_current_tempo2() (C++), and openmpt_module_get_current_tempo2() (C). * [New] C API: New stream callbacks for various platform extensions to the C stdio interface: openmpt_stream_get_file_posix_lfs64_callbacks() in libopenmpt/libopenmpt_stream_callbacks_file_posix_lfs64.h for explicit off64_t on Posix systems, openmpt_stream_get_file_posix_callbacks() in libopenmpt/libopenmpt_stream_callbacks_file_posix.h for off_t on Posix systems, openmpt_stream_get_file_msvcrt_callbacks() in libopenmpt/libopenmpt_stream_callbacks_file_msvcrt.h for 64bit file support on Windows systems with the Microsoft C runtime, and openmpt_stream_get_file_mingw_callbacks() in libopenmpt/libopenmpt_stream_callbacks_file_mingw.h for 64bit file support when targetting MinGW. The old openmpt_stream_get_file_callbacks() has been deprecated in favour of a stricly standard conforming openmpt_stream_get_file_callbacks2() in the same libopenmpt/libopenmpt_stream_callbacks_file.h header. libopenmpt/libopenmpt.h defines LIBOPENMPT_STREAM_CALLBACKS_FILE_POSIX_LFS64, LIBOPENMPT_STREAM_CALLBACKS_FILE_POSIX, LIBOPENMPT_STREAM_CALLBACKS_FILE_MSVCRT, and LIBOPENMPT_STREAM_CALLBACKS_FILE_MINGW respectively in order to allow for checking header availability. * [New] C API: New stream callbacks for memory buffers. openmpt_stream_get_buffer_callbacks() and openmpt_stream_buffer_init() are deprecated. Use openmpt_stream_get_buffer_callbacks2() and openmpt_stream_buffer_init2() instead. The new variants do not support loading only a file prefix and checking for overflow any more. This was only useful when using the old openmpt_could_open_probability2() style interface from the libopenmpt 0.2 API, which has been superseded by openmpt_probe_file_header(), openmpt_probe_file_header_without_filesize(), and openmpt_probe_file_header_from_stream() in libopenmpt 0.3.0. * [New] libopenmpt_ext: New interface interactive3 adding openmpt::ext::interactive3::set_current_tempo2() (C++) and openmpt_module_ext_interface_interactive3.set_current_tempo2() (C) which allow setting non-integer tempo values. * [New] New Makefile option CONFIG=mingw-w64 which consolidates all MinGW-w64 build configurations with the following options: MINGW_FLAVOUR=[|-posix|-win32], WINDOWS_ARCH=[x86|amd64], WINDOWS_FAMILY=[|desktop-app|app|phone-app|pc-app], and WINDOWS_VERSION=[win95|win98|winme|winnt4|win2000|winxp|winxp64|winvista|win7|win8|win8.1|win10|win11]. * [New] New Makefile option CONFIG=mingw which consolidates all MinGW build configurations with the following options: MINGW_FLAVOUR=[|-posix|-win32], and WINDOWS_VERSION=[win95|win98|winme|winnt4|win2000|winxp]. * [New] Building with MSYS2 is now fully supported for Makefile and Autotools build systems. * [New] Makefile CONFIG=djgpp now supports CPU= option to build optimized for a particular CPU. See build/make/config-djgpp.mk for all available options. FLAVOURED_DIR=1 places the CPU-specific optimized builds in separate folders below bin/. * [New] Building with a MinGW32 CRTDLL toolchain is now supported via Makefile option CONFIG=mingw32crt. * [New] Makefile now uses PKG_CONFIG as path to pkg-config. * [New] The C++ API is now also enabled for Emscripten builds by default. * [New] Support for GCC 7 has been restored. * [New] Support for Clang 6 has been restored. * [New] Support for Android NDK 18 has been restored. * [New] openmpt123: --banner [0|1|2] allows changing the openmpt123 banner style to hidden, shown, or verbose, respectively. * [New] openmpt123: --assume-terminal allows skipping the openmpt123 terminal check, and thus allows running the UI with non-terminal stdin, which can be useful for some very basic remote control functionality. * [Change] xmp-openmpt: The Amiga resampler emulation is now enabled by default. * [Change] in_openmpt: The Amiga resampler emulation is now enabled by default. * [Change] The official Windows builds (x86, amd64, arm, arm64) now require Windows 10 21H2 (or later). The official legacy Windows builds (x86-legacy, amd64-legacy) are unchanged and still require Windows 7 (or later). ... changelog too long, skipping 83 lines ... happen when using a volume command to achieve the same effect). ==== libphonenumber ==== Version update (8.12.23 -> 8.13.15) - absl is also needed for using the -devel package - Update to version 8.13.15: * Updated phone metadata for region code(s): BE, BF, IL, MN, NE, OM, SO, SV * Updated carrier data for country calling code(s): 226 (en), 227 (en), 252 (en), 351 (en), 968 (en), 972 (en) - Update to version 8.13.14: * Many data changes * Removal of unused leading_zero_possible proto field in phonemetadata.proto and all generated code * https://github.com/google/libphonenumber/blob/v8.13.14/release_notes.txt - Depends on abseil now - Turn metadata regeneration off explicitly, wasn't done previously either. This allows dropping the java dependency. - Add patches to fix building: * 0001-Build-with-C-17.patch * 0001-Revert-Fix-typo-in-arguments-to-add_metadata_gen_tar.patch - protobuf got fixed, builds fine with 22 now - prefer protobuf 21 as it is not compatible with v22 ==== libtommath ==== - handle rpmlint warnings/errors: * update rpmlintrc to address new Factory warnings * make libtommath-examples noarch * make shared library executable - specfile style changes enforced by hard to avoid format_spec_file service - Add 546.patch: Fix possible integer overflow. ==== libunwind ==== Version update (1.6.2 -> 1.7.0) - Update to 1.7.0: * DWARF: dwarf4 fix cie parsing. * x86_64: Stop aliasing RSP and CFA. * Prefer EXTBL unwinding on ARM. * [GCC pedantic] Fix "error: comma at end of enumerator list" when linking to libunwind. * Fix table indexing in dwarf_search_unwind_table. * Expose function-pointer-to-name API. * Add port for Linux on LoongArch. * Add more POSIX polyfills for nix cross-build on win. * DWARF: avoid a data race. * skip latex2man check with --disable-documentation. * Skip init_mem_validate calls during remote unwind. * [Loongarch64] amend the LoongArch64's CMakeLists.txt and compiling error. * Update license in pal-single-threaded.c. * Fix to malloc call in tdep_get_elf_image. * Updated to determine PAGE_SIZE dynamically. * Unwind with pointer authentication on arm64. * Make some structs non-empty. * DWARF: avoid invalid memory access with invalid CFI. * fix incorrect store in AArch64 getcontext. * avoid leaking registers across sigreturn. * Use constant for array size in os-linux. * added coredump support for s390x. * Allow an alternate LOG_DRIVER to be specified. * Remove bashisms from tests/check-namespace.sh. * Add autodetection of procfs_status type. * Add remote unwinding support for macOS. * Expose get_proc_info_in_range API. * Autodetect presence of elf_fpregset_t. * coredump: stop assuming .text and .eh_frame are both in the first segment of an ELF file. * Make sigaltstack() optional. * Add support for arm fp registers unwind. * updated dist to focal for s390x jobs. * Add RISC-V machine value in remote unwind. * Fix SOFTFP case for arm getcontext. * Added support for unwinding from the vsyscall region. * Stop the autotools nag about AC_CONFIG_MACRO_DIRS. * Fix make distcheck due to missing coredump header. * Fix undefined behavior issues in aarch64. * Account for lr in aarch64's uc_addr. * tests/run-coredump-unwind: Skip test if no coredump has been created. * [LoongArch64] Update the port to latest kernel ABI. * arm64: Add support for unwinding in SVE functions * check-namespace.sh: adjust aarch64 symbols. * Updated to determine PAGE_SIZE dynamically for loongarch64. * Gia64-test-nat.c: #include <signal.h> for sigaction(). * Fix for unw_backtrace fast path does not work on x86_64. * fix the way load offset is detected so it works with lld linker. * Remove the unused powerpc setcontext() dummies. * Add unw_backtrace2 function. - Include the man pages, README and LICENSE files. - Update libunwind.keyring file. ==== libwps ==== Version update (0.4.13 -> 0.4.14) - Update to 0.4.14: * autoupdate configure.ac * correct various warnings ==== libzypp ==== Version update (17.31.14 -> 17.31.15) - Fix build against protobuf >= 22 (fixes #465, closes #466) Port away from protobuf_generate_cpp. Upstream protobuf does not export protobuf_generate_cpp by default anymore. Use protobuf_generate instead, which is also available on older versions. - Remove SUSE < SLE11 constructs (fixes #464). - version 17.31.15 (22) ==== linux-glibc-devel ==== Version update (6.3 -> 6.4) - Update to kernel headers 6.4 ==== open-vm-tools ==== Subpackages: libvmtools0 open-vm-tools-desktop - limit to protobuf < 22 for now until build failures have been fixed ==== protobuf-c ==== - limit to protobuf < 22 as it is not compatible with newer versions (gh#protobuf-c#544) ==== protobuf21 ==== Subpackages: libprotobuf-lite3_21_12 libprotobuf3_21_12 - rename to protobuf21 and provide cpp bindings only for now as protobuf 22 is disruptive ==== python-attrs ==== - remove outdated constructs, we no longer support < 3.8 ==== python-pycryptodome ==== - Add %{?sle15_python_module_pythons} ==== qemu ==== Subpackages: qemu-accel-tcg-x86 qemu-audio-spice qemu-block-curl qemu-block-nfs qemu-block-rbd qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-usb-host qemu-hw-usb-redirect qemu-hw-usb-smartcard qemu-ipxe qemu-ksm qemu-lang qemu-microvm qemu-seabios qemu-tools qemu-ui-curses qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 - Patches added (first one is relevant for boo#1197298 and bsc#1212768): * [openSUSE][RPM] Use --preserve-argv0 in qemu-linux-user (#32) * [openSUSE][RPM] Split qemu-tools package (#31) ==== sddm ==== Subpackages: sddm-branding-openSUSE - Add patches to allow dropping InputMethod= from 11-kwin_wayland.conf (boo#1212880): * 0001-greeter-Look-at-WAYLAND_DISPLAY-for-platform-detecti.patch * 0002-Ignore-InputMethod-qtvirtualkeyboard-on-wayland.patch ==== speech-dispatcher ==== Subpackages: libspeechd2 python3-speechd - Use always python3.11 to build, so Leap use also python3.11 to build. ==== webkit2gtk3 ==== Version update (2.40.2 -> 2.40.3) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.40.3: + Make memory pressure monitor honor memory.memsw.usage_in_bytes if exists. + Include key modifiers in wheel events. + Apply cookie blocking policy to WebSocket handshakes. + Remove accidental dependency on GLib 2.70. + Fix the build with BUBBLEWRAP_SANDBOX disabled. + Fix several crashes and rendering issues. ==== webkit2gtk3-soup2 ==== Version update (2.40.2 -> 2.40.3) Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Update to version 2.40.3: + Make memory pressure monitor honor memory.memsw.usage_in_bytes if exists. + Include key modifiers in wheel events. + Apply cookie blocking policy to WebSocket handshakes. + Remove accidental dependency on GLib 2.70. + Fix the build with BUBBLEWRAP_SANDBOX disabled. + Fix several crashes and rendering issues.

1 0

When are upstream kernel commits merged into Tumbleweed?
by Mark Rubin 02 Jul '23

02 Jul '23

The nouveau driver has had a serious, longstanding bug that seemingly only exhibits itself with the 6.3 and onward kernels, and only with older Nvidia chipsets. For details, see https://forums.opensuse.org/t/older-laptop-tumbleweed-nvidia-and-nouveau-dr… and https://gitlab.freedesktop.org/drm/nouveau/-/issues/213. After several weeks of hard work by developers at Freedesktop and RedHat (it was a very difficult bug to track down) a fix was accepted at https://github.com/torvalds/linux/commit/c8a5d5ea3ba6a18958f8d76430e4cd68ee… and is in both https://github.com/torvalds/linux/blob/master/drivers/gpu/drm/nouveau/nouve… and https://github.com/openSUSE/kernel/blob/master/drivers/gpu/drm/nouveau/nouv… But the change has not yet been merged into the kernel-source-6.3.7-1.2.noarch package's /usr/src/linux-6.3.7-1/drivers/gpu/drm/nouveau/nouveau_drm.c file, nor (as evidenced by the kernel fault still happening at boot) in 20230620's vmlinuz-6.3.7-1-default kernel. Should I expect that it will be included in an upcoming Tumbleweed snapshot/repo/ISO in the near future? If not, how can I advocate that it should be? There are already several related Bugzillas (1212553, 1211217, 1211568, 1211216, 1209197), none of which seem to be aware of the root cause nor this newly-released fix. Note that although the bug currently only triggers with specific, older Nvidia GPUs and "has never caused problems before", the previous code is undeniably wrong and the patch should be applied regardless. And once again, it has been accepted into the mainstream kernel sources. Thanks for any insights into the Tumbleweed release process, and on how to proceed.

8 17